Security awareness training with phishing simulationClicks turn into reports.

Security awareness training prepares employees for attacks that technical filters do not catch: well-made phishing mails, fake invoices, calls from bogus support. Conbool Awareness combines phishing simulation, short playable lessons, long trainings as film, a report button in the mail client and evidence for audits in one interface.

You choose a target group and a programme. Conbool sends simulated phishing mails spread over several days so they do not announce themselves. Difficulty rises in five levels with the team. Whoever clicks lands on an exercise page and sees in under a minute how the mail could have been spotted.

No. By default the evaluation only shows values for groups of five or more. Whoever clicks gets an explanation, not a report to their manager. Per-person evaluation can only be switched on deliberately, with a reason, and every change stays in the change log.

Usually yes, as soon as behaviour is evaluated. Awareness provides key points for the agreement and a one-page sheet for the works council that shows what is evaluated, what is not and what changed in the period.

More than 60 short lessons played in three to five minutes, long trainings as narrated film for the annual obligation, and role paths for groups with their own risk, such as accounting, HR, front desk, IT and management. Courses can be assigned with deadline, reminder, final test and repetition.

A short lesson takes three to five minutes depending on the level. The explanation after a click takes less than a minute. A long training is a film in chapters with a final test and can be paused and resumed later.

Yes. With the Conbool add-in, employees report suspicious messages with one click, in Outlook classic, the new Outlook, Outlook on the web and Thunderbird from version 128. The add-in recognises practice mails itself. Real reports land in a work queue for IT, with the filter's verdict.

The report rate shows how many people reported an exercise instead of clicking. With MailGuard, Awareness also measures how many real threats that got through were reported and confirmed by IT. That is the figure that shows whether your team acts as a sensor when it matters.

Yes. Awareness can be used on its own, also in front of Microsoft 365 or Exchange. With MailGuard, two things are added: simulations from real attacks that reached your company, and the report rate of real threats in the threat mirror.

If an attack got through the filter into a mailbox, it is taken over defused: links lead to the exercise page, external images and tracking pixels are removed, recipient addresses replaced. The template waits as a draft and only goes out after your approval. Every access to the content is logged.

Yes. NIS2 requires cyber hygiene and training in Art. 21(2)(g) and training of management in Art. 20(2). The evidence for the audit maps exercises and courses to these clauses and to ISO/IEC 27001 Annex A 6.3 and Clause 7.3, on one printable page.

Yes. A dedicated AI literacy course covers company data in AI tools, invented answers, recordings in meetings and deceptively real requests. It can be assigned yearly with a test and appears in the evidence.

Besides click and report rate there are two measuring courses: the knowledge check with fourteen questions from seven fields and the security culture survey with eight statements. Both are evaluated without names and compared with the previous round. Optionally you compare your values with the average of your industry.

Lessons, courses and long trainings are available in German and English. Every person gets content in their language. An overview shows whether matching templates exist for every language in the workforce.

Through a personal link from the invitation or with their own Microsoft account. In the learning area each person only sees their own progress: open courses, deadlines and records.

Either in German data centres or entirely in your own environment, including the training content. Access and erasure under Art. 15 and 17 GDPR are built in for individual persons.

A first exercise is set up in a few days. A quick start creates target group, programme and the annual briefing. Before that, the introduction guides you through management, data protection, works council, IT support and staff, with ready drafts for every step.

Awareness is part of Suite 3 and can be tried free for 30 days. For individual cases it can also be booked separately.