What's New

Organisations had limited visibility into their email suppression lists within the MyCompliance platform, leading to challenges in ensuring that targeted content reaches the right audience. This lack of transparency increases the risk of non-compliant conversations.

We are introducing the Suppression List report, designed to empower security leaders and their teams by providing direct access to AWS email suppression lists within the MyCompliance application (registration and content notification emails – not phishing emails). This feature enhances transparency, streamlines processes, and enables proactive management of email deliverability issues. More info here 

We’ve extended the maximum delay between steps in a triggers campaign from 5 days to 30 days. This update allows admins to create longer campaigns, such as onboarding sequences or high-touch campaigns for users who require more guidance which are crucial for reinforcing training and improving compliance over time.

Additionally, the ‘preview’ function has been added to the first step of the campaign, allowing admins to easily review the content before it is deployed.

Admins now have the flexibility to delete fusion templates before they’ve been published. This enhancement allows for more control and reduces potential clutter from unused templates.

We’ve enhanced the user experience by giving Cyber Police a dedicated and prominent space in the ‘Not Typical eLearning’ tile on the Teams app homepage. This change not only makes the content easier to find but also encourages engagement with more dynamic, story-driven security training.

Problem – Admins were finding it difficult to manage reminder emails effectively due to the lack of flexibility over reminder frequency and timing. These limitations made it hard to align reminder systems with internal compliance standards and escalation processes, which is critical to managing human risk.

Solution – We are introducing enhanced customisation for reminder emails, providing you with full control over when and now, how often they are sent.  With this update, you can adjust reminder frequencies to weekly, bi-weekly or monthly. This flexibility allows you to align reminders with your organisation’s compliance criteria.

Value – Our admins understand the importance of timely, relevant reminders in driving compliance and reinforcing security behaviours. This update gives you the flexibility and control needed to optimise engagement with training programs that are crucial to reducing human risk.

Security leaders are increasingly concerned about how well their teams understand and retain critical security training. However, current reporting lacks insight into how many attempts it takes for users to successfully pass a course quiz. This lack of visibility makes it challenging to assess comprehension levels and identify potential human risks within the organisation.

We have introduced a new feature in the Fusion Course Analysis report that tracks the number of attempts users make to pass a quiz. This enhancement will provide administrators with deeper insights into user performance, allowing for more informed decision-making around training effectiveness and potential areas of vulnerability.

Features & Benefits:

• Detailed Attempt Tracking: Administrators can now see the exact number of attempts each user took to pass a quiz, providing a clear indicator of how well users are absorbing and retaining the training material.
• Integrated Reporting: This new data is seamlessly integrated into the Fusion Course Analysis report, displayed alongside quiz scores, making it easy to analyse performance without additional tools or steps.
• Custom and Embedded Quizzes: Whether it’s an embedded or a custom quiz, the number of attempts is tracked and reported, ensuring comprehensive coverage across all types.
• Actionable Insights: By understanding how many attempts are needed, admins can identify users or groups who may need additional support, helping to reduce human risk and improve overall security posture.

The ability to track quiz attempts provides a clearer picture of how effectively users are learning and retaining crucial security information. By leveraging these insights, you can tailor training initiatives, address potential weaknesses early on, and ultimately foster a more security-conscious culture within your organisation.

This feature addresses the need for a more modern and streamlined user interface by refreshing the design of the DACH Outlook Web App Plugin, including the logo and customer-facing messages or modals seen by end users when reporting emails. Implementing this feature leads to an improved user experience by providing a cleaner, fresher look throughout the button and all associated modals. By adopting this feature, organisations can benefit from a more cohesive and professional appearance, enhancing both usability and visual appeal for end users.

This feature addresses the limitations in learning experience content for multilingual phishing simulations by enabling the use of all types of Learning Experience formats beyond video.

By allowing admins to choose from a wider range of content types for their phishing simulation learning experience, this enhancement improves flexibility and caters to different learning preferences, leading to better comprehension and retention for users in multilingual environments.

Implementing this feature leads to a more tailored and effective approach to cybersecurity training across diverse linguistic groups.

By adopting this feature, businesses can achieve higher engagement and improved training outcomes in phishing simulations, ensuring a more robust defense against phishing attacks.

We have introduced ISO 27001:2022 as a new category, allowing customers to assign policies and other content directly to the latest ISO standard. This ensures clear organisation and documentation of compliance efforts, which is critical during ISO audits. The ISO 27001:2013 category will remain available to support existing content. View more.

Features & Benefits:

• Up-to-date compliance: Align policies and content with latest ISO27001:2022, ensuring readiness for audits.
• Seamless integration: Easily assign, filter, and manage content like other standards (NIST, PCI DSS).
• Improved audit preparedness: Simplifies demonstrating compliance via the Category Overview Report, making audit processes faster and more effective.

Some customers faced challenges when the original reporter decided to leave the organisation, incident ownership defaults to the administrator, with no option of reassign the incident to another individual. Also, the incident reporter was not visible across all our reports, which in turn took longer to track accountability.

Features:

We have added a new “Change Incident Reporter” option allows administrators to reassign incident ownership easily.

Additionally, we have enhanced the Incident Report and Summary views by adding the “Incident Reporter” to these reports. This provides clear visibility into who reported each incident across all our reports.

View more.

Benefits:

• Flexibility: Reassign incidents to the right person, ensuring accurate ownership.
• Clear Visibility: Quickly see who reported each incident without extra steps.
• Improved Management: Maintain context and streamline incident handling, even when reporters leave.

To help improve navigation, we have integrated the Assessment Creator and Assessment Reporting features as tiles directly onto the main Privacy Admin homepage and moved their positions on the left navigation panel.

Features & Benefits:

• Consistent Layout: Aligns with existing modules (Policy, Learning, Phish) for a unified user journey.
• Ease of Access: Reduces training time by making key features readily accessible.

This improvement helps streamline the user navigation and enables data protection & security teams to have quick access to some of the most used features.

This feature addresses the problem of only recording end user IP addresses when they complete the phish learning experience causing confusion and inconsistencies in phish reporting.

By updating the phish reporting mechanism to record IP addresses when users click on a phish instead of when they open a learning experience, this feature solves the problem by providing clear and consistent data throughout reports.

Implementing this feature leads to increased credibility and accuracy in phish reporting, as IP addresses will be reliably recorded during the phish interaction, and organisations can trust the data for dispute resolution.

By adopting this feature, businesses can achieve enhanced data integrity, driving overall growth and success through improved trust and reliability in phishing simulation results.