The ESI® ...
Against what, under what conditions and to what degree are you safe? This question poses greatchallenges when it comes to securing the company and investment decisions. IT-Seal has developed abenchmark, the 'Employee Security Index' (ESI®), for the area of social engineering and phishing awareness.
The Employee Security Index is based on a standardized framework that takes into account different types of attackers by simulating many different attacks with different preparation times. For this purpose, hundreds of different attacks with different levels of difficulty are created and sent (patented) to our customers fully automatically. We make sure that each participant receives a different e-mail and thus exclude the corridor radio – which effectively increases security but falsifies the measurement considerably.
The ESI® makes security awareness training measurable based on scientific data.
An analysis of more than 75,000 simulated e-mails provides a revealing insight into the security behavior of individual departments, as shown in the figure on the left across the company.
All test groups show critical phishing awareness, with an average Employee Security Index of 46.2. While the HR, IT and finance departments perform above average across the company, the managers, assistants and the C-level stand out at the lower end.
With the help of the Awareness Academy you define a goal-ESI®, which we will achieve together with you. Inaddition to our phishing simulation, we also use other security awareness measures, such as short videos,face-to-face training and e-learning.
The ESI® thus represents a control instrument which allows tocontinuously monitor the security awareness in companies. The effectiveness of individual training measurescan be reviewed and concrete needs can be identified. The anonymous evaluation of the results on a groupbasis contributes to employee protection. Communication with both management and staff is facilitated by atangible key figure: a quantitative analysis of security awareness offers a direct comparison with othercompanies in similar industries and can thus be used as a basis for decisions on further investments.