Scope of Services: Standard Phishing Simulation Campaign

General product description

By purchasing G DATA Phishing Simulation, you receive a service that sends technically authentic phishing emails to the recipient addresses you specify. However, these do not link to real fraudulent websites; instead, they only connect to our statistics servers.

This enables you to assess the risks within your company based on verifiable figures and increases your employees' ability to recognize phishing threats.

A campaign is defined as one execution of the process described (see duration and sending). How often you can repeat these executions depends on the number of campaigns purchased.

To manage and run your campaign(s), you receive online access to your personal Awareness Manager. Local installations are not strictly required; however, if desired, you can add a report button to the Outlook installation used by your participants within your organization.

To run such a campaign, it is necessary to take preparatory measures to ensure the smooth delivery of the emails. These measures are not part of the product and are the responsibility of the Customer’s email server administrator.

Duration and sending of a campaign

  • Duration of 4 weeks, one email per week per employee.

  • Sending aligned to typical office hours (MonFri, 8:00 to 19:00).
    Sending time at random (not all participants receive the emails at the same time).

Content

  • Emails are based on real cases.

  • Three emails with a link to a coordinated website and one email with an attachment (empty file in .docx format, no malware).

  • In some cases, personalized salutation.

  • Available in the languages:

    • German

    • English

    • French

    • Spanish

    • Italian

    • Dutch

    • Swiss German

Version number

The current version number of the G DATA report button: 1.0.7.0. You can find the version number in the header of the manifest file.

You can download the file in the G DATA Awareness Manager under the Kampagnen Ziel tab.

365 Security
Version number

Management

  • Intuitively usable web frontend Awareness Manager.

  • Clear dashboard in the Awareness Manager that you can use to track progress even during an ongoing campaign.

  • Import participants manually or via CSV import (Active Directory).

  • Select start date.

  • Choose whether a feedback page is displayed when a link is clicked.

  • Whitelisting test.

  • Automatic provisioning of reporting after the campaign ends.

  • Optional report button. If your participants click the report button because they suspect it is a phishing email, your participants are informed whether the email is a phishing attempt from our G DATA Phishing Simulation or not. In addition, the report button gives you the option to establish a reporting process for suspected phishing emails in order to forward emails for manual analysis at the push of a button.

Reporting

  • Clear overall report as a PDF file.

  • List of the top scenarios with which a real attack would have been successful.

  • Recommended Actions that minimize your company’s risk.

  • Statistical analysis of your employees' interaction rate for opened emails, attachments, clicked links, and disclosed data.

Optional, fee-based add-on features:

  • Group report (categorization into groups possible starting from 10 email addresses).

  • Individual analysis related to individual participants as an .xlsx.

Support

  • Callback service or email support.

  • Support directly from the manufacturer in Germany in German and English.

  • Standard questions on using the phishing simulation and on the smooth execution of the campaigns.