KnowBe4 Security Awareness Training implementation and management — HRM

About the service

Assertiva SA provides professional consulting, implementation, and support services for KnowBe4, the world's leading Security Awareness Training and Human Risk Management platform. KnowBe4's human-first approach enables organizations to address the most persistent attack vector in cybersecurity: people. By combining simulated phishing, adaptive training, real-time coaching, and behavioral analytics, KnowBe4 empowers organizations to build a security culture that measurably reduces risk across the entire workforce — employees, contractors, and leadership alike.

Scope and Deliverables

• Assessment of the current security awareness posture: Baseline measurement of human risk exposure, including an initial phishing simulation, Security Awareness Proficiency Assessment (SAPA), Phish-prone Percentage (PPP) benchmarking, security culture survey, and identification of high-risk user groups.

• Human risk management roadmap design: Definition of training program structure, campaign calendar, phishing simulation strategy, user segmentation model, and success metrics aligned to risk reduction and compliance objectives.

• Platform deployment and configuration: End-to-end implementation of the KnowBe4 platform (tenant setup, domain verification, email whitelisting, user provisioning, PAB deployment, and reporting). Includes KMSAT and complementary modules (PhishER, SecurityCoach, Compliance Plus, PasswordIQ, etc.).

• User directory integration: Synchronization of users and groups from Active Directory, Azure AD / Entra ID, or SCIM-compatible directories for automated onboarding/offboarding.

• Smart Groups configuration: Design of dynamic user segmentation based on department, role, location, risk score, and training status to enable targeted awareness campaigns and adaptive training.

• Phishing simulation campaigns: Design and execution of simulated social engineering campaigns (email, QR codes/quishing, USB drops, and AI-driven threats like deepfakes). Includes campaign customization, automated remedial training, and performance reporting.

• Security awareness training campaigns: Rollout of training programs using KnowBe4's library, including compliance modules, role-based paths, and gamified content. Optional development of personalized awareness videos using Synthesia.

• AI-driven personalized training (AIDA): Configuration of KnowBe4's AI-powered adaptive training to deliver individualized content based on user behavior and risk profile.

• PhishER / PhishER Plus: Configuration of email threat management workflows via the Phish Alert Button (PAB), including automated triage, threat categorization, and incident response integration. Can include PhishFlip to convert real threats into simulations.

• SecurityCoach: Configuration of real-time coaching workflows triggered by risky behavior detected by integrated security technologies (Netskope, CrowdStrike, Microsoft Defender, Okta, Zscaler, etc.).

• Compliance training: Configuration of Compliance Plus modules aligned to regulatory frameworks (GDPR, SOX, ISO 27001), with automated assignment and tracking.

• Reporting and executive dashboards: Configuration of risk score dashboards, PPP tracking, training completion reports, and summaries tailored to governance and audit requirements.

• Remediation strategy: Definition of a continuous improvement roadmap based on campaign results and behavioral data, including alignment workshops with security and HR teams.

• Knowledge transfer: Technical sessions for platform administrators covering campaign management, content customization, and day-to-day operations.

• Technical documentation: Handover materials including configuration inventory, campaign runbooks, integration architecture, and operational procedures.

• Platform integrations and automation: Support for integrations with identity providers, email platforms, HR systems (SAP SuccessFactors, Cornerstone, Google Workspace), and security tools via APIs.

• Support and incident management: Resolution of platform incidents, root cause analysis, periodic health checks, campaign performance reviews, and on-demand training sessions.

Why Assertiva S.A.

At Assertiva S.A., we bring together a highly qualified team of consultants and cybersecurity specialists with over 19 years of presence across Latin America and the Caribbean. We go beyond platform deployment. Our approach supports clients end to end, from baseline assessments and program design to platform configuration, campaign execution, user engagement, reporting, and continuous optimization. Our methodology treats security awareness as an ongoing risk reduction program rather than a one-time training initiative. Every engagement is tailored to the organization's culture, risk profile, regulatory requirements, and business objectives, helping clients build measurable improvements in security behavior and security culture over time.