RiskSight measures your controls. This measures your people.
A structured programme of simulated phishing campaigns over three months, measuring how users actually respond and reporting on human risk exposure and improvement.
What’s included in the 3-month programme.
Every engagement covers seven defined deliverables—from tenant licensing and campaign execution through to automated Microsoft training and the final executive trend report.
Three simulated campaigns over three months
Executed at a monthly cadence so you measure how user behaviour changes over time rather than relying on a single point-in-time snapshot.
Defender for Office 365 Plan 2 licensing
Provided for participating users for the programme duration where your Microsoft 365 tenant is not already licensed for Attack Simulation Training.
Campaign design, configuration and execution in your tenant
Our engineers select realistic phishing payloads, configure safe delivery rules, and run every simulation directly inside your Microsoft environment.
Monthly metrics — click-through, credential submission and reporting rates
Tracks how many users clicked the lure, how many entered credentials on the simulated landing page, and how many actively reported the email.
Identification of repeat offenders and high-risk users
Separates one-off mistakes from individuals and roles that repeatedly fail simulations so targeted safeguards can be prioritised.
Microsoft attack simulation training automatically assigned to users who fail
Users who click or submit credentials are immediately enrolled in targeted Microsoft training modules while the simulation is still fresh.
Final executive report with trend across all three campaigns
At the end of month three, you receive an executive report documenting baseline exposure, monthly progression, repeat-offender risk, and training completion across all three campaigns.
Three campaigns. Measured trend.
A single phishing test only gives you a snapshot. Running three structured simulations over three months shows whether Microsoft attack simulation training is actually reducing credential submission and increasing reporting.
Provision Defender for Office 365 Plan 2 licensing for participating users (where not already licensed), configure simulation delivery in your tenant, and run Campaign 1 to establish baseline click-through, credential submission, and user reporting rates.
Users who fail Campaign 1 are automatically assigned Microsoft attack simulation training. Campaign 2 tests participating users with a fresh simulation scenario and tracks monthly click-through, credential submission, and reporting metrics.
Execute the third simulated phishing campaign, assign training to any users who fail, and isolate repeat offenders and high-risk users across the three-month dataset.
Deliver the final executive report documenting the behavioural trend across all three campaigns, repeat-offender exposure, and training completion rates.
Clear boundaries. Clear compliance value.
Not penetration testing.
This is not penetration testing and must not be positioned as such. Scope is limited to simulated email phishing and the associated training.
Remediation or configuration changes arising from findings · ongoing awareness management beyond three months · technical posture assessment (that’s RiskSight).
Pair Human Risk Assessment with RiskSight for Microsoft 365 to verify that your tenant’s technical security controls are properly configured.
Engagement Delivery
Structured 3-month programme for participating users. Often commissioned to satisfy a cyber insurer or regulatory audit requirement for attack simulation training.
Underwriters and auditors increasingly require documented evidence of live phishing simulations and targeted remediation training rather than a tick-box annual policy.
Provides monthly click-through, credential submission, and reporting metrics plus a final executive trend report across all three campaigns.