Launching a first phishing campaign is a key milestone.
It allows you to measure how exposed your organization may be to security risks stemming from a lack of employee training.
No need for concern — the goal is not to penalize employees, but to help them improve through repeated exposure, using three essential learning levers:
1️⃣ Theoretical lever: Assess whether employees understand the threat and can identify phishing indicators.
2️⃣ Heuristic lever: Evaluate their ability to apply this knowledge when facing manipulation and social engineering attempts.
3️⃣ Cultural lever: Strengthen awareness of individual responsibility and the security implications of everyday actions.
1 – Objectives
Learn how to launch a phishing campaign:
Manage campaign types
Select employees to target
Choose appropriate scenarios
Define a sending schedule
2 – Prerequisites
Proper permissions to configure a campaign
3 – Choose the campaign general setup
3.1 – Access campaign creation
Click + New Campaign from the Campaigns section of the Phishing module.
3.2 – Name the campaign
Enter the desired campaign name.
3.3 – Setup the campaign type and goal
Define the compromise action:
Is the compromise due to entering credentials?
Is the compromise due to clicking a link, an interaction?
Then select what should happen after a user fails
Redirect to a just-in-time training page
Redirect quietly
4 – Choose scenario(s)
4.1 – Use library filters
Search among Arsen-provided or custom scenarios.
Click here to know more about the library filters.
4.2 – Validate scenarios
Select one or more scenarios, then click Continue.
If multiple scenarios are selected, the campaign becomes a multi-scenario campaign.
5 – Select campaign targets
5.1 – Understand selection options
Select employees either by:
Target by selecting employee groups
Target specific employees
5.2 – Filter employees
5.2.1 – Use the available filters
Security Score Range: display employees based on security score
Campaign Count Range: filter by the number of campaigns received
Only show untrained employees: display employees who never received a campaign
Search Employees: search by name
5.2.2 – Select all results
Click Select All.
5.3 – Select groups
Click Target employee Groups to choose one or more groups at once.
5.4 – Confirm targets
Click Continue to launch.
6 – Define the campaign schedule
6.1 – Send immediately your campaign
Check the Send now mode
📚 Note
Arsen sends several dozen emails per minute. Total duration depends on target volume
6.2 – Schedule the campaign
Check Schedule over time to choose a date and time.
Select the first and last dates to create a date range within which your emails will be sent and include or not week-ends.
Define the delivery window of your emails:
Define a time range: restrict sending to specific hours. This can help respect work policies and avoid out-of-hours delivery.
7 – Launch the campaign
7.1 – Review campaign settings
The scheduling page shows a full summary before sending.
7.2 – Launch the campaign
Click 🚀 Launch Campaign when everything is ready.















