It's nice that users could see their aggregate phishing test results however, it's not really that useful to users. What would be more useful, and I know this because they keep asking me for it, would be to surface the actual phishing test emails as part of the LX.
Currently, the LX displays the 'reported phishing emails' and the 'phishing failures'. Better would be giving them access to review those failures, the templates used to bait and catch them, and the red flags associated with those templates. Start by giving them a link to review their phishing failures:
Then display a simplified version of the admin view of the user's profile's phishing tab and allow the user to review any phish at will, whether reported or failed:
Reviewing individual phish would then display the phish template, similar to the admins view but tailored for users and which allows them to learn from their mistakes: investigate red flags, see failure reasons (clicked, enabled macros, opened attachment, replied, etc.) and a nice explainer/tooltip for why each of those is a failure ("replies can be used to....", "opening macros allows code to..."):
Such an enhancement in the LX dashboard for my users would be immensely useful and helpful to them. As mentioned above, I know this because I frequently get asked for this type of information from my users.
SEI enabled landing pages are terrific and I use them for all phish campaigns however, they only suffice to train at the time of click and do nothing for ongoing learning initiated by the user at a time when they want to learn more.
Please consider this enhancement. I don't believe my organization would be the only one to benefit from it.
Hozzászólások írásához jelentkezzen be.