Views:

Create a phishing simulation for your employees to assess cybersercurity awareness levels and educate on common threats.

Phishing simulations are tests your organization can carry out to determine your employees' cybersecurity awareness level. A phishing simulation campaign allows you to control the duration of the simulation, monitor results, and determine next steps for employees who failed the simulation.
Important
Important
This is a pre-release sub-feature and is not part of the existing features of an official commercial or general release. Please review the Pre-release sub-feature disclaimer before using the sub-feature.

Procedure

  1. In the Trend Vision One console, go to Attack Surface Risk Management → Security Awareness → Phishing Simulations.
  2. Under Simulations, click Create Simulation.
  3. Configure the campaign Content settings.
    1. Add a short, descriptive name for your campaign that helps you identify the campaign's purpose.
    2. Choose whether to mark the campaign as a test campaign. The results of test campaigns do not affect user risk scores.
    3. Choose the language for the campaign content.
    4. Select the template for the phishing email you wish to send.
      • Standard templates: Choose from the Trend Vision One library of phishing email templates.
      • Custom templates: Choose from your saved custom templates.
        Note
        Note
        Click Preview to see what the template looks like. You may also view and edit custom phishing email templates from the Email Templates tab in Phishing Simulations.
    5. Select the landing page you wish your users to see when clicking on links in the phishing simulation email. Click Preview to see what the template looks like.
      • Standard templates: Choose from the Trend Vision One library of phishing landing pages.
      • Custom templates: Choose from your saved custom landing pages.
        Note
        Note
        Click Preview to see what the template looks like. You may also view and edit custom phishing landing pages from the Landing Page Templates tab in Phishing Simulations.
  4. Configure the campaign Recipients settings.
    Important
    Important
    • To choose recipients, you must have sufficient asset visibility scope to view user data.
    • Ensure you have configured a data source in Data Sources in order to select recipients. Newly connected data sources may take up to 30 minutes to display user data.
    • Ensure you have verified your domain in Domain Verification to demonstrate you have adequate permissions to send phishing simulation emails. Recipient email address domains must match either one of your verified domains or the domain of your Trend Vision One primary user account.
  5. Configure the Delivery settings.
    1. Choose whether to start the simulation immediately or at a future scheduled time.
    2. Select an end date for the simulation.
    3. Choose how often to deliver simulation emails. If selecting Monthly or Quarterly, click View to view the start and end dates for each round of the simulation.
    4. Choose the time zone for the emails to be delivered in.
    5. Choose whether to stagger email delivery among recipients.
      Important
      Important
      Staggered delivery is only available when the simulation duration is longer than eight days.
    6. Configure the allow list for your email provider in order to ensure emails are successfully delivered.
    7. (Optional) Specify an email address to receive a test email to ensure your settings are configured correctly.
  6. Set up follow-up notifications for participants, including when to send notifications and which email template to use.
  7. Click Create Simulation.
    You may view the progress of the phishing simulation by clicking on the simulation name from the Simulations list.
Related information