CloudSignLab includes four short security awareness courses, ready in English, Spanish and German:
- Recognising phishing
- Passwords and sign-in security
- Phone calls, fake bosses and other tricks
- Handling data and reporting incidents
Add a course (owners and admins)
- Open Training in the organization menu.
- Under Built-in awareness courses, click Add to trainings on a course.
- The course becomes an active training that everyone must complete, repeated every year. You can change this later like any other training.
Take a course (everyone)
- In Training, click Start course next to the course.
- Read the three lessons. Use Next to move on, or click a lesson at the top.
- Answer the five quiz questions and click Check answers. You need 80 % to pass. The answers are checked by the server, and you see the right answer for each question afterwards.
- If you did not pass, read the lessons again and click Try again (up to 5 tries an hour).
- When you pass, the training counts as completed and you can open your Certificate to print it or save it as a PDF.
For courses there is no I completed this training button: passing the quiz is the completion.
Phishing tests (owners and admins)
Under Phishing tests you prepare practice emails:
- Click Prepare a test, give it a name and choose one of the three test emails. The preview shows the email and what gives it away.
- Confirm that your staff have been told that phishing tests take place, then click Save as draft.
Results are shown as totals only (sent, clicked, click rate), never who clicked. People who open the link see a page explaining that it was a test and what to look out for.
When CloudSignLab has switched on sending, click Send on a draft test. CloudSignLab asks you to confirm, because the email goes to everyone in the organization and cannot be stopped once sent. The test then shows Sent, and the totals fill in as the emails go out. Use Delete to remove a test and its results. Until sending is switched on, a note says that sending is not available yet and tests stay drafts.
Phishing tests are their own part of your package and come with Professional and higher packages. Without them, Training shows Phishing tests with a lock and a link to compare packages; your trainings and courses are not affected.
Test emails never come from CloudSignLab's own address or domain. They are sent from a separate test domain through its own mail server, and their links point to that domain too, so a test looks like a real email from outside. Sending is coming soon: when it starts, CloudSignLab tells you the test domain and mail server, so your IT can allow them in your mail filter.