I was mainly doing the awareness training and awareness module of SecurityCoach. I have used it twice in two companies for a longer period of time. I was the lead to get the tool deployed in the organization and then worked on the security and awareness module of it.
With this module of SecurityCoach, we used to do our phishing campaign and training campaign. We had a proper training planner generated at the start of the year with quarterly phishing awareness planned. We rolled out those trainings through SecurityCoach around the organization, and once we identified people who were phished or clicked on the link, we trained them. The training was also rolled out through SecurityCoach. It's a video-based training with a proper library available that has substantial content and videos. We trained them through these video modules. We asked them to watch these modules, which ranged from two to five minutes - short video clips to make them aware that they had been phished, clicked on a link, and this was the message we wanted to deliver to our audience or employees.
