In June 2021, the first Phishing-Simulations were launched. For this purpose, IT-Seal created and sent out hundreds of fully automated attacks in various levels of difficulty to the approximately 350 employees of Star Finanz. The staff had been prepared for the Phishing campaign in advance via blogposts and circular e-mails.

After the campaign was completed, IT-Seal released the first e-learning in the Security Hub to deepen the learning content. This is a learning platform to which all participants have their own access, in order to call up the training courses and view their learning progress. Star Finanz security officers have their own front end – the Awareness Manager – which they can use to access the anonymized campaign results. They are also provided with regular stakeholder and quarterly reports by IT-Seal. To date, several Spear-Phishing campaigns, e-learnings and face-to-face training sessions have been conducted. The respective thrust is determined by Star Finanz and IT-Seal at quarterly meeting dates. The basis is the ESI®, which is evaluated anonymously by IT-Seal for the entire workforce and for the individual areas.

“Together, we are constantly planning further optimizations in order to maintain and further improve the high level of security already achieved by our employees,” says security manager Haase, drawing up an initial interim balance. “Even today, we have decided to make the Awareness Training courses permanent training courses, as this is the only way to achieve a long-term effect, even with new employees.”