What is the difference between a training campaign and an evaluation campaign?
The difference between a training campaign (Training Awareness Campaign) and an evaluation campaign (Phishing Assessment Campaign) depends on the campaign's objective.
☝️ If the objective is to raise awareness, inform, or familiarize your employees with the signs they should look out for in a phishing scenario, then you would use a training campaign.
☝️ If, on the other hand, the goal is to determine the level of your company's security against the risk of phishing at a given time, then you would opt for an evaluation campaign, which is more "silent."
To choose between the two campaigns, click the New Campaign button in the Phishing Simulation section under the Campaign category.
##Summary
Launching a training campaign
Launching an evaluation campaign
To create a training campaign, click on Training Awareness Campaign.
The label on the thumbnail indicates the benefit of the campaign: raising your employees' awareness by sending a phishing email, while displaying a dedicated training page in case of failure.
Credential Harvesting - If you want to collect data on the entire scenario (opening the email > clicking on the email link > compromise on the landing page > training page). All data on each step is reported in the campaign statistics.
Click-Only - For this type of campaign, only clicks are used in the security score calculation. After the click, the employee will be directly redirected to the training page. This type of campaign allows you to create strong reflexes in your employee, right from their inbox. Note that clicking on the phishing link in the email will be considered a compromise.
To create an evaluation campaign, click on Phishing Assessment Campaign.
This type of campaign allows you to test your employees without the training page at the end of the scenario. This campaign evaluates employee behavior in the face of phishing cyber-attack risks in your company.
For this type of campaign, we also use the term silent campaign because your employees will have less opportunity, without the training page, to realize that it was a phishing test from your services.
Credential Harvesting - If you want to collect data on the entire scenario (opening the email > clicking on the email link > compromise on the landing page). All data on each step is reported in the campaign statistics.
☝️ If the objective is to raise awareness, inform, or familiarize your employees with the signs they should look out for in a phishing scenario, then you would use a training campaign.
☝️ If, on the other hand, the goal is to determine the level of your company's security against the risk of phishing at a given time, then you would opt for an evaluation campaign, which is more "silent."
To choose between the two campaigns, click the New Campaign button in the Phishing Simulation section under the Campaign category.
##Summary
Launching a training campaign
Launching an evaluation campaign
Launching a training campaign
To create a training campaign, click on Training Awareness Campaign.
The label on the thumbnail indicates the benefit of the campaign: raising your employees' awareness by sending a phishing email, while displaying a dedicated training page in case of failure.
Next, you will need to choose between two simulation levels:
Credential Harvesting - If you want to collect data on the entire scenario (opening the email > clicking on the email link > compromise on the landing page > training page). All data on each step is reported in the campaign statistics.
Click-Only - For this type of campaign, only clicks are used in the security score calculation. After the click, the employee will be directly redirected to the training page. This type of campaign allows you to create strong reflexes in your employee, right from their inbox. Note that clicking on the phishing link in the email will be considered a compromise.
Launching an evaluation campaign
To create an evaluation campaign, click on Phishing Assessment Campaign.
This type of campaign allows you to test your employees without the training page at the end of the scenario. This campaign evaluates employee behavior in the face of phishing cyber-attack risks in your company.
For this type of campaign, we also use the term silent campaign because your employees will have less opportunity, without the training page, to realize that it was a phishing test from your services.
You will then need to select:
Credential Harvesting - If you want to collect data on the entire scenario (opening the email > clicking on the email link > compromise on the landing page). All data on each step is reported in the campaign statistics.
Updated on: 13/04/2023
Thank you!