Cyber Guru Phishing - en - v1

www.cyberguru.eu – contact@cyberguru.eu
Cyber Guru Phishing
*
Cyber Security Awareness
Automated platform for continuous individual anti-phishing
training

Solution
OUR ANSWER IS CALLED CYBER
GURU
A LINE OF PRODUCTS DESIGNED
TO INCREASE THE SECURITY
PROFILE OF AN ORGANIZATION BY
TARGETING AWARENESS AND
USER BEHAVIOUR
CYBER GURU
AWARENESS
Advanced e-
Learning
platform
CYBER GURU
PHISHING
Phishing attack
simulation platform
CYBER GURU
ENTERPRISE
Comprehensive
synergistic
programme
Our Cyber Security Awareness
products constitute a unique market
proposition in the fight against
Cyber Crime by focusing on the
human factor
2

The Phishing
Phenomenon
The PHISHING
phenomenon is continuously
growing both qualitatively and
quantitatively.
It is especially dangerous when tied
to the phenomenon of
SOCIALENGINEERING
© Clusit 2019 - Report on ICT Security in Italy
80% of data breaches are the
result of a phishing activity.
Verizon
88% of organizations reported
being targeted by a Phishing
attack in the past year.
KPMG
Phishing attacks cost an
average of one billion per
year.
Forbes
Distribution of attack techniques
3

Ethical
Phishing
One of the most common
anti-phishing practices is called
Ethical Phishing
Traditional EP campaigns have
SIGNIFICANT LIMITATIONS
From a results point of view, it is objectively difficult to
interpret the results obtained from EP
From an objectives point of view, EP is oriented towards
providing only a "static" measure of phishing risks
From a management point of view, it has a significant
impact on the activities of Cyber Security teams
From a training point of view, actual training activities are
too infrequent
From a risk measurement point of view, EP puts too
much emphasis on Click Rate
4

Objectives
TO TRANSFORM THE BEHAVIOUR
OF THE CORPORATE POPULATION
ADAPTING IT TO THE CURRENT
LEVEL OF RISK
TO TRAIN THE INDIVIDUAL'S
READINESS AND RESPONSIVENESS
TO PHISHING ATTACKS TO
DEVELOP GREATER RESILIENCE
To minimize the impact on Cyber Security teams
through automation.
To ensure training effectiveness through
personalization and customisation
To provide evidence of effectiveness through
accurate measurement of results, based on
advanced, easy to understand metrics
1
2
5

Cyber Guru
Phishing
The only ANTI-PHISHING platform
that continuously trains individuals
to develop readiness and
responsiveness to attacks.
The only fully-automated platform
that can customize simulated
attacks based on a behavioural
profile
Attack simulations are personalised based on the
organization's needs and the behavioural profile of the individual
user
The system does not measure vulnerability but rather seeks to
reduce it through training that emphasizes readiness and
responsiveness
The system provides advanced metrics that allow you to
monitor ongoing improvement in the "cyber posture" of
employees.
The system is fully automated (using AI) to eliminate any
operational impact on the Cyber Security team
6

Features
ON-GOING
TRAINING
1
Maintains the
"readiness" of
each employee,
developing their
ability to react to
attacks
DIVERSIFIED
SCENARIOS
2
Simulates
diverse attack
scenarios with
increasingly
sophisticated
deception based
on individual
employee
TRAINING
CONTENT
3
Links lead to
landing pages
with light
training content
adapted to the
attack
MACHINE
LEARNING
4
Modifies the
simulation
strategies through
a data-driven
ability to learn
SERVICE
5
As a service, the
platform minimizes
the impact on the
Cyber Security
team
EFFECTIVE
REPORTING
6
Reports the risk
map and the
overall
improvement
resulting from the
training strategy
7

Process
FIRST
CAMPAIGN
1
The first
campaign sends
basic e-mails
with a distribution
model designed
to circumvent
word-of-mouth
advance notice.
AUTOMATIC
TRAINING
2
Users who fall for
phishing traps are
automatically
exposed to brief
educational
content
ANALYSIS OF
RESULTS
3
The system
analyses the
results of the first
campaign and
automatically
prepares (using
AI) the next
campaign
NEXT
CAMPAIGN
4
More complex e-
mails are sent to
the better-
prepared users,
while e-mails of
the same level
and context are
sent to users who
failed the first test
EFFECTIVE
TRAINING
5
Over time, users
are subjected to a
completely
personalized anti-
phishing
training course
EFFECTIVE
REPORTING
6
A sophisticated
dashboard
provides
complete
visibility of the
evolution of the
training plan (in
anonymous
format)
8

Simulate > Train > Measure
SIMULATE TRAIN
MEASURE
9

Adaptive
Process
The real strength of the platform lies
in the automation and adaptive
approach based on machine learning.
The templates used, the relevance,
the sending frequencies and the level
of difficulty are parameters that
enable the modification of the
simulations based on actual results,
to increase the effectiveness for each
individual.
10
8
Adaptive learning
Automated
delivery
engine
E-mails with a low
click level
are eliminated
Various types
of e-mail are
sent
Relevance is
defined based
on groups
New e-mails
are added to
the campaign
The sending
frequency is
dynamic

CAMPAIGN
MONITORING
Reporting
The platform provides
broad, structured
reporting that guarantees
complete process visibility
11

Reporting
12

DETAILS ORGANISED
ACCORDING TO
CONFIGURATION
PARAMETERS
Reporting
13

Reporting
14

ANALYTICAL USER VIEW
(ANONYMISED) WITH
IDENTIFICATION OF "SERIAL
CLICKERS"
Reporting
15

Reporting
16

Reporting
RESILIENCE SERIAL
CLICKER
COMBINED METRICS TO
INDICATE THE LEVEL OF
RISK IN A RELIABLE WAY
17

Reporting
18

Reporting
SERIAL
CLICKER
19

Reporting
RESILIENCE
1.6
10
12.8
20

On-Boarding
USER LIST
1
WHITE-LISTING
2
MODEL
TECHNICAL TEST
3
The effectiveness
of the white-listing
phase is verified
APPROVAL
TEMPLATES AND
BRANDING
4
Approval of
suggested
templates for the
first campaign;
Customisation of
the landing page
templates
INTERNAL
COMMUNICATION
5
A strongly
recommended
activity to raise
awareness of the
programme
The targeted user
list is defined,
associating users
with
organizational
parameters
E-MAIL &
TRAINING
Configuration that
allows attacks to
overcome security
barriers
SENDING
TEST EMAILS
FIRST
CAMPAIGN
PROGRAMME
KICK-OFF
GO LIVE
6
Supported by the
Customer
Success Manager
FIRST
CAMPAIGN
LAUNCHED
AVERAGE TIME: 1 WEEK
21

Why
Cyber Guru
Phishing
BECAUSE IT GOES BEYOND THE
LIMITATIONS OF TRADITIONAL
TRAINING AND ETHICAL PHISHING
• Because it uses continuous education and repetitive
training to improve readiness and individual
responsiveness
• Because it constantly adapts the training to the profile
of the individual and the organization
• Because it effectively develops the resilience of the
organization, demonstrated through timely reporting
• Because it is oriented towards risk reduction and not
simply risk measurement.
• Because, as a service, it minimizes the management
impact on the Cyber Security team
22

*
Cyber Guru Phishing
Cyber Security Awareness
Automated platform for continuous individual anti-phishing
training

Cyber Guru Phishing - en - v1

Recommended

Recommended

More Related Content

What's hot

What's hot (20)

Similar to Cyber Guru Phishing - en - v1

Similar to Cyber Guru Phishing - en - v1 (20)

More from Cyber Guru srl

More from Cyber Guru srl (7)

Recently uploaded

Recently uploaded (20)

Cyber Guru Phishing - en - v1