Smart Groups

Smart Groups SAPA Automation Guide

In this article, you will learn how to use Smart Groups to automatically assign training based on your users’ Security Awareness Proficiency Assessment (SAPA) scores. If a user gets a low score in a particular SAPA knowledge area, they will be enrolled in training content that strengthens that area.

For general information about using Smart Groups, see our Smart Groups Quickstart Guide.

Before You Begin

Before you begin, decide what training content you would like to assign to strengthen each SAPA knowledge area. The seven knowledge areas are listed below:

  1. Email Security
  2. Incident Reporting
  3. Internet Use
  4. Mobile Devices
  5. Passwords & Authentication
  6. Human Firewall
  7. Social Media

Then, browse our ModStore to decide which training modules you would like to assign for each knowledge area. Make sure you add the modules to your Library tab in the ModStore so you can use the modules in your training campaigns.

Once you’ve picked your training modules, follow the steps below to build your automated SAPA-based training workflow.

Step One: Build a Smart Group for Each Knowledge Area

First, create Smart Groups that correspond to each SAPA knowledge area. When you create your training campaigns, you will set these Smart Groups as the campaign recipients.

Create a Smart Group and name it something identifiable, such as “SAPA: Email Security Knowledge Area”. Then, add the following Assessment criterion:

1. Condition: Select Must.
2. Scope: Select Any Selected.
3. Knowledge Area: Select the desired knowledge area.
4. Comparison: Select Less Than.
5. Score: Enter your desired score.
6. Time Frame: Select Any.

After you’ve filled out the fields listed above, click Save. Your finished criterion will state:

Assessment

User must have scored less than [desired percentage] in [desired Knowledge Area(s)].

Repeat this process for each knowledge area. You should have a total of seven Smart Groups based on the seven knowledge areas.

Step Two: Create a Smart Group for Low-Scoring Users

Next, create a Smart Group for users who got a low score on all seven SAPA knowledge areas. You can use this Smart Group to assign more frequent, targeted training to users who need to improve their security awareness skills across a broad range of topics.

The ideal proficiency score will vary for every organization. To determine your desired score, use our Industry Benchmark Data tool. To find this tool, navigate to the Security Awareness Proficiency Assessment widget on your Dashboard. This tool shows you the average SAPA score for an organization in your industry and of your size. Use the drop-down menus on the widget to choose the options that best match your organization. We recommend using the industry average as your ideal proficiency score.

Once you’ve determined your desired proficiency score, create a Smart Group and name it something identifiable, such as “SAPA: Low-Scoring Users”. Then, add the following Assessment criterion:

1. Condition: Select Must.
2. Scope: Select All Selected.
3. Knowledge Area: Select all seven knowledge areas from the drop-down menu.
4. Comparison: Select Less Than.
5. Score: Enter your desired proficiency score.
6. Time Frame: Select Any.

After you’ve filled out the fields listed above, click Save. Your finished criterion will state:

Assessment

User must have scored less than [desired percentage] in all of these 7 knowledge areas.

This Smart Group will automatically update each time your users take the SAPA. We recommend assigning the SAPA to your users one to two times per year.

Once you’ve created the Smart Group, assign this group to a phishing campaign. To learn how to set up a phishing campaign, see our Creating and Managing Phishing Campaigns article.

Step Three: Create an Audit Smart Group

Finally, we recommend creating a Smart Group of users who have not completed SAPA. You can use this group as an audit to make sure all your users are being assessed and sorted appropriately into your other SAPA groups.

Create a Smart Group and name it something identifiable, such as “SAPA Audit Smart Group”. Then, set the following Training criterion:

1. Condition: Select Must Not.
2. Training Event: Select Completed.
3. Scope: Select All Selected.
4. Assignments: Select Security Awareness Proficiency Assessment (SAPA).
5. Time Frame: Select Any.

After you’ve filled out the fields listed above, click Save. Your finished criterion will state:

Training

User must not have completed Security Awareness Proficiency Assessment (SAPA).

Step Four: Create a Training Campaign for Each Knowledge Area

Now that you have your Smart Groups set up, you can create training campaigns that correspond to each knowledge area. To learn how to create a training campaign, see our Setting up a Training Campaign video.

We encourage you to customize the campaign settings as much as you'd like. For information about recommended training campaign settings, see the details below:

  1. Campaign Name: Name the campaign something identifiable. We recommend indicating which knowledge area this campaign covers.
  2. End Date: Choose a Relative Duration so each user has the same amount of time to complete the training once enrolled. Choose a duration that matches your organization’s needs.
  3. Content: Select the training content you want to assign to your users for this knowledge area. 
  4. Enroll Groups: Select the Smart Group that corresponds to this knowledge area.
  5. Select the Enable automatic enrollment for new users option. This setting ensures that any user who is added to the Smart Group in the future will be enrolled in this campaign.
  6. Notifications: We recommend adding at least three notifications: one Welcome notification, one Remind After Enrollment notification, and one Remind Before Due Date notification to encourage your users to complete their training.

Repeat the process above to create a training campaign for each of your knowledge area Smart Groups. You won’t need to create a training campaign for your low-scoring users Smart Group or your audit Smart Group.

Can't find what you're looking for?

Contact Support