Security Awareness Training Platform Ref

Cheatsheet Content

Executive Summary: KnowBe4 HRM+ Platinum PLUS Malaysia needs to move from a basic compliance model to a Human Risk Management (HRM) approach for security awareness training. The current solution, Proofpoint, lacks engaging Bahasa Melayu content and mobile accessibility for a diverse workforce. Recommended Solution: KnowBe4 HRM+ Platinum. Key Advantages: Largest library of localized content. "Netflix-style" engagement model reduces user fatigue. Advanced AI-driven automation (SmartRisk Agents). Dedicated Learner App for mobile, offline Malay-language training, crucial for field staff. Why KnowBe4 Wins for PLUS Malaysia Bahasa Melayu Content Depth: KnowBe4's "ModStore" offers the largest library of localized, culturally relevant content, unlike competitors relying on auto-captions. Mobile-First for Field Staff: The Learner App allows PLUSRonda and toll operations staff to download and watch Malay-language training offline. HRM+ (Human Risk Management): Platinum tier includes SmartRisk Agents and AI Defense Agents for measuring behavior change and automatic intervention, reducing IT security team burden. Competitive Landscape Analysis Competitor 1: Proofpoint Security Assessment Training (Incumbent) Status: Current Provider The Gap: "Gateway-First" company; training is an add-on to email filter, resulting in "corporate," "dry," "academic" content. Malay Support: Primarily text-based or subtitled; lacks video modules in Bahasa Melayu. User Fatigue: Users recognize templates, leading to disengagement. Weakness: Rigid platform; difficult to upload custom Malay videos. Competitor 2: Mimecast Engage Security Awareness Approach: Focuses on "humor" (e.g., "Sound Judgment" series). Falls Short For PLUS: Localization Limit: Smaller library (~150-200 modules vs. KnowBe4's 1,000+); Bahasa Melayu support limited to subtitles (closed captions) rather than native audio/video. Integration Lock-in: Best if email gateway is also Mimecast; loses reporting power if not. Competitor 3: Fortra (Terranova Security / PhishLabs) Approach: Known for high-quality, "serious" educational content and strong accessibility. Falls Short For PLUS: Pacing: Content is longer, more "course-like"; KnowBe4's "micro-learning" (1-3 minute videos) is better for busy operations staff. Brand Awareness: Generic content less engaging than KnowBe4's "The Inside Man" drama series. Feature Comparison Summary Feature KnowBe4 HRM+ Platinum (Proposed) Proofpoint PSAT (Current) Mimecast Engage Fortra (Terranova) Content Library Size Largest (1,500+ items) Medium Small (Curated) Medium Bahasa Melayu Support High (Video, Audio, & Subtitles across diverse styles) Medium (Mostly Subs/Text) Low (Mostly Subs) Medium (Good text translations) Mobile App (Offline) Yes (KnowBe4 Learner App) - Critical for PLUS Field Staff No / Limited Limited Yes Video Style Netflix-quality, Drama, Animation, Documentary Corporate, Slide-based, "Teachable Moments" Sitcom/Humor-based Educational/Academic Custom Content Upload Easy (Upload PLUS's own Malay videos) Difficult / Rigid Limited Moderate Automation/AI High (AI Defense Agents, SmartRisk) Medium (Auto-enrollment) Low Medium Price Model Per User/Year (All-inclusive) Per User + Add-ons Per User Per User Strategic Recommendation for PLUS The "Winning Argument" for PLUS Management: "Proofpoint protects the Email Gateway, but KnowBe4 protects the Human Gateway . For a company like PLUS, where thousands of staff operate away from desks and interact with the public, we need a platform that speaks their language—literally and culturally. KnowBe4 is the only solution that combines a Mobile-First approach for our field teams with Bahasa Melayu content that is actually entertaining to watch, ensuring the security message sticks." Next Step: Draft a "Pilot Test Plan" for PLUS to deploy KnowBe4's specific "Mobile-First" Malay modules to a small group of PLUSRonda or Toll Operations staff, demonstrating superior engagement rates. Technical Compliance Matrix Highlights This matrix is designed for RFP/tender evaluation, highlighting KnowBe4's strengths for PLUS Malaysia. "Trap" Criteria: Requirements 1.1 (Native Audio) and 2.1 (Offline Mobile App) are critical. Proofpoint and Mimecast cannot fully comply, making KnowBe4 the only viable option for PLUS's operational needs. Weighting: Recommend PLUS Malaysia assigns a higher weight (e.g., 30%) to the "Mobile & Accessibility" section due to its large non-desk workforce. Category 1: Content & Localization Technical Requirement / Specification KnowBe4 HRM+ (Platinum) Proofpoint PSAT Mimecast Engage Fortra (Terranova) 1.1 Native Bahasa Melayu Audio/Video: High-quality video modules with native Bahasa Melayu audio (not just subtitles). Comply (High) - Largest library of native/dubbed Malay audio content. Partial - Primarily relies on English audio with Bahasa Melayu subtitles/captions. Partial - Heavily reliant on subtitles; limited native audio content. Partial - Strong text translation, but limited native voice-over video content. 1.2 Content Variety & Frequency: 1,000+ content items (videos, games, posters) with new localized content added monthly. Comply - 1,500+ items. Fresh content constantly added. Partial - Smaller library; content updates less frequent/diverse. Non-Comply - Small, curated library of ~150 modules. Updates slower. Partial - Medium library size; focuses on longer courses vs. micro-learning. 1.3 Custom Content Upload: Ability for PLUS administrators to easily upload and host unlimited custom videos or SCORM files. Comply - Unlimited upload support; creates "Custom Modules" easily. Partial - Possible but rigid; often requires professional services or complex steps. Partial - Limited capability for hosting external custom video content. Comply - Good support for custom SCORM uploads. Category 2: Mobile & Accessibility Technical Requirement / Specification KnowBe4 HRM+ (Platinum) Proofpoint PSAT Mimecast Engage Fortra (Terranova) 2.1 Offline Mobile App: Dedicated mobile app (iOS/Android) for offline viewing (critical for PLUSRonda/Toll staff in low-bandwidth areas). Comply - Learner App supports full offline download & sync. Non-Comply - Mobile-responsive web only; no dedicated offline download capability. Partial - App exists but has limited offline functionality. Partial - Mobile supported, but course length often unsuitable for mobile data. 2.2 Low-Bandwidth Optimization: Platform automatically adjusts video quality or offers "lite" versions. Comply - Adaptive streaming & lightweight modules available. Partial - Standard streaming; may lag on poor field connections. Partial - High-quality video focus requires good bandwidth. Comply - Offers static/slide-based options for low bandwidth. Category 3: Automation & AI Technical Requirement / Specification KnowBe4 HRM+ (Platinum) Proofpoint PSAT Mimecast Engage Fortra (Terranova) 3.1 Dynamic Risk Scoring (SmartRisk): Calculates "Personal Risk Score" based on real-world behaviors and training history. Comply - SmartRisk Agents ingest data to create dynamic user risk profiles. Partial - Score exists but heavily weighted toward quiz/phishing results only. Partial - Basic risk scoring; lacks depth outside email. Partial - Focuses on completion rates rather than dynamic behavioral risk. 3.2 Automated Remediation (AI Agents): AI automatically assigns "remedial training" after risky behavior. Comply - AI Defense Agents automate intervention instantly. Partial - Rule-based automation exists but less dynamic/AI-driven. Non-Comply - Manual or rigid "if-then" campaign rules mostly. Partial - Standard automation rules available. Category 4: Reporting & Admin Technical Requirement / Specification KnowBe4 HRM+ (Platinum) Proofpoint PSAT Mimecast Engage Fortra (Terranova) 4.1 Phish-Prone Percentage (PPP): Industry-standard benchmark metric to compare PLUS's risk level. Comply - Industry standard PPP benchmark included. Partial - Has benchmarking, but less granular peer data. Partial - Proprietary metrics; harder to compare with industry standards. Partial - Standard reporting; less focus on peer benchmarking. 4.2 "Phish Alert" Button (PAB) Integration: Seamless plugin for Outlook/O365 to report threats and reward users. Comply - Standard feature; gamifies reporting behavior. Comply - Strong feature, integrates with their TRAP analysis. Comply - Available. Comply - Available.