The filter catches most of it. The rest is caught by your team.

Technical defense reliably catches mass waves, known senders, and malicious attachments. What gets through is exactly what is well done: a targeted message without attachments, without known references, that looks like normal work and hits a person under time pressure. One click is enough. Conbool Awareness practices this emergency before it occurs: realistic phishing simulations, brief training sessions afterwards, and reports that you can submit for review.

Why Conbool Awareness convinces

• Practice instead of instruction: simulations distributed over the year instead of a mandatory training session in January
• Evaluation at group level: results per department, without a ranking of individual employees
• Proof that meets inspection: content, time frames, and development instead of an attendance list
• Without your own project team: the first round is set up in a few days, after that the program runs without your input
• Operation in Germany: optionally from German data centers or fully in your own environment
• Part of a platform: same administration and audit log as the other Conbool modules

What Awareness includes

A program, four steps

1. Define recipient group: departments, groups, or the entire company
2. Simulation runs: test messages are sent out over time
3. Training follows: those who have reacted receive a brief explanation of exactly this scam
4. Next round: the program repeats itself, the report shows the development over time

Effect is created through repetition, not through a single large training session per year.

Training that can be proven

NIS2 requires in Article 21, paragraph 2, letter g, cyber hygiene and training in the field of security. Not only the implementation is required, but also the proof.

• Participation and progress per department can be traced
• Proof of content, time frames, and development of several rounds, exportable for review and revision
• Evaluation at group level, so no one is exposed

Templates from practice

The simulations are based on scams that are actually in circulation. Obvious test emails only confirm a false sense of security, because attackers do not send obvious test emails.

Coordination with the works council

As soon as behavior is evaluated, co-determination is affected. Conbool Awareness only evaluates at group level and does not report reactions to superiors. This makes the coordination easier.

In three steps in the program

1. Agree on circle: you determine who participates and involve the works council
2. Set up program: we set up the first round together, with a schedule, scams, and training units
3. Discuss result: after the first round, you see the report and decide how to proceed

The first round is set up in a few days. The development becomes meaningful from the second round onwards.

Security and compliance

• ISO 27001 certified data centers in Germany
• DSGVO-compliant including a processing contract according to Art. 28
• NIS2-ready and BSI-compliant, with proof of training obligation
• Member of the Alliance for Cyber Security of the BSI and Bitkom
• Optionally operated in your own data center, including training content

For whom Conbool Awareness is made

For companies that must provide proof of training obligation, from medium-sized businesses to enterprises, and for managed service providers that operate awareness for multiple clients centrally. Especially relevant for operators of critical and particularly critical infrastructure according to NIS2, as well as for health, finance, law, and the public sector.

A module of the Conbool Suite

Awareness can be used individually and is part of the Conbool email security suite: threat protection, encryption, secure file transfer, central signatures, DMARC, archiving, 365 backup, and emergency operation. Together with MailGuard, the effect is greater because technology and humans are prepared for the same scams.

Practice the emergency now, before it occurs. Made in Germany.