Supervisor Statistics

In the "Statistics" section, the supervisor has access to an overview of the performance of the corporate population.

The following section is divided in turn into different tabs:

• Overview

• Report Awareness

• Report Channel

• Report Phishing

• Report Remediation

Within this section are the following widgets:

• Global Participation

• Distribution of users by services

• Ranking

The graph ‘Global Participation’ shows, in percentage terms, the trend over time of the overall participation of the corporate population, divided into the three sections: Awareness, Channel and Phishing.

Regarding Awareness and Channel, the graph shows the percentage of modules completed by all users compared to those released, calculated at a given moment. For example, in the first month, the calculation is based on one module, in the second month on two, and so on, month by month.

As for Phishing, the graph represents the percentage of emails opened compared to those sent, also calculated on a month-by-month basis, reflecting the situation at each specific period.

The Global Participation graph is updated every 8 hours.

The supervisor can download the data and generate a report by clicking on the "Generate Report" button and selecting the desired report type.

• The "Report Overview" PPT provides a snapshot of user engagement, including:

  • User Status: A graph showing users' progress in the Awareness and/or Channel services.

  • Overall Participation: For Awareness and Channel, the ratio of completed to available activities; for Phishing, the ratio of opened to received emails. Detailed data for the past 12 months is provided in the next slide.

  • Top 10 Users Ranking: A ranking of the top 10 users based on performance.

• The “Completed Activities” report allows the supervisor to view, for each user and for each activity (Awareness modules and Channel episodes), information such as elapsed time, points obtained ,date of availability, start date, and completion date. Data can be downloaded for a specific time period.

• The “Partecipation” report allows the supervisor to view for each user the training alignment status (online, regular, irregular, inactive) and the contents of both services completed.

• The ‘User ranking’ report allows the supervisor to view in detail all users, to which team they belong, their position in the ranking, the points accumulated so far and the medals won.

• The ‘Team ranking’ report analyses each team's position in the ranking, the points and medals associated with each team.

Within this graph, it is possible to visualise the arrangement of users in the various bands of participation in training programmes.

On the left side you can see

• total number of users registered on the platform

• total number of teams (if any)

On the right you can see the numbers of users in the various bands

• Inline users: who have viewed all available training content

• Regular: users who are behind by 1 training content

• Non-regular: users who are more than 1 training content behind

• Inactive: users who have never logged onto the platform

The graph integrates both Awareness/Channel states (inner ring) and phishing-related behaviors (outer ring), providing a more comprehensive view. This approach allows information to be correlated across available services, providing richer and more detailed data to better understand the interaction between awareness and phishing risk.

This graph is updated on a daily basis.

In this section there is a graph that shows the classification of all users and the related points acquired.

The classification can be viewed in relation to:

• company users

• of everyone as a team (in case of team gamification)

Furthermore, it is possible to view the classification of users relating to a specific team by selecting it from the "Company team" drop-down menu. Once you have selected your company's general user classification, you can specify the desired team to view the location of users within that team.

This graph is updated daily.

NOTE: If the "Cyber ​​Guru Phishing" service is active, in the ranking, for each user, in addition to the path alignment status, also the level of risk relating to phishing simulations is indicated.

This graph is updated daily.

In the "Report Awareness" tab, the supervisor will have all the data related to the users' participation in the Awareness training course.

Within this section are the following widgets:

• Numerical users

• Distribution of users by participation status

• Time spent on the activity in minutes

• Points earned for activities

  
  This section is updated daily.

In the first widget at the top left, there is information regarding:

• Total company users

• Total Teams

In the center donut chart, the supervisor will graphically see the distribution of users by degree of participation in the Awareness modules.

• Inline

• Regular

• Non-regular

• Inactive

The same information is shown in numerical form on the right side of the widget

The supervisor will be able to view the users' dwell time for each module in minutes: they will then see the minutes it took users to complete each module.

The first bar in the graph represents the actual duration of the activity (e.g., 16 minutes for module 1 "Phishing") the bar next to it, on the other hand, the average time, in minutes, spent by the on that module.

On the other hand, the "Points earned for activities" graph in the lower right shows the points associated with the individual activity (module) and those on average won by users for each module.

In this section, you can download several reports related to the Awareness service

The “Report Awareness” PPT illustrates the distribution of users in the Awareness service according to their progress, showing the total time (in minutes) spent on each activity (training module) and the points accumulated for each module.

The “Attempts per Activities" report contains detailed information on users' progress within the training activities. Each row of the file includes the User's First and Last Name, Activity performed, Module, Questions asked, Correct Answer, and User's Response. In addition, the Result of each attempt and the Time Spent to complete the task are reported. This data enables analysis of user performance and engagement in different training activities.

The “Activities Completed Awareness” report shows ,for each Awareness module, the time the user spent on it, the points obtained ,the availability date, the start date and the completion date. The report can be downloaded with respect to a specific time period.

The “Participation Awareness” report shows for each participant the modules viewed and the user's alignment status with the training as well as the status with respect to phishing.

Under the "Report Channel" tab, the supervisor has the same metrics available as in the section previously analyzed, but referring to Channel episodes.

Within this section are the following widgets:

• Numerical users

• Distribution of users by participation status

• Time spent on activity in minutes

All graphs are updated daily.

In the first widget at the top left, there is information regarding:

• Total company users

• Total Teams

In the center donut chart, the supervisor will graphically see the distribution of team users by degree of participation in the Awareness modules.

• Inline

• Regular

• Non-regular

• Inactive

The same information is shown in numerical form on the right side of the widget.

The supervisor will be able to view the users' time spent on each episode in minutes: they will then see the minutes it took users to complete each episode.

The first bar in the graph represents the actual duration of the activity (e.g., 10 minutes for the first episode "From Heaven to Hell in a Click" ) the bar next to it, on the other hand, the average time, in minutes, spent by users on that episode.

Within this section it is possible to generate various reports related to the Channel service

The "Report Channel" PPT illustrates the distribution of users within the Channel service based on their progress, showing the total time (in minutes) spent on each activity (training episode).

The “Completed Activities Channel” report, on the other hand, shows for each Channel episode the time the user has been on it, the availability date, the start date, and the completion date. The report can be downloaded with respect to a specific time frame.

The “Participation Channel” report shows for each participant, which episodes he or she has viewed, also highlighting the user's status with respect to the training program and phishing.

In the "Phishing Report" tab, you can access data related to simulated phishing attacks.

You can filter the data by clicking on the "Filters" button and selecting which campaign, role, or company function to display the data for.

The filter is global and applies to all widgets present on the page.

All data on this page are updated every two hours every day, in the interval between 10:00 am and 10:00 pm.

In case no filter is selected, the data displayed are from the last campaign.

The bar chart "Risk Evolution" allows the analysis of the risk evolution by examining, for each phishing campaign that occurred, the distribution of users based on their behavior.

It is important to note that the risk evolution concerns only the users who have interacted (clicked/reported) at least once with the attack emails that are sent.

Users are divided into:

• Cyber Defenders: Users who recognize attacks and report them by activating the appropriate function provided.

• Strong Users: Users who have clicked at least once in the past but click less than once every 5 campaigns since then.

• Intermediate Users: Users who click at least 2 times out of 5 campaigns.

• Weak Users: Users who click very frequently - approximately 3 times out of 5 campaigns.

The same graph also allows analyzing the number of clicks for each campaign attributed to the users within the team, showing the distribution of users based on their clicking habits. To display this type of graph, simply click on the three dots in the top right corner. This graph serves as a detection of an absolute value.
 

This widget illustrates how the behavior of "weak users" develops, namely those who repeatedly click, across different campaigns.

The graph called "Reliability Score" expresses the resistance to attacks by the target, namely the company's population. This indicator conceptually represents the number of attacks required to "hit" the target reference.

The "Risk Distribution" graph is based on the grouping criteria chosen by the company.This distribution is influenced by the popularity of the groupings. Typically, a highly populated department expresses a greater risk compared to a smaller department, even with a lower Click-Rate.

The same graph allows the analysis of data for roles and functions, or for associated values such as Orgs.

The "Click Rate per Device" graph allows the analysis of the click rate divided by device. Alternatively, by clicking on the three dots, you can analyze the data by operating system or browser.

The "Click Rate per campaign" graph analyzes the click rate of users across all occurred campaigns.

The Click Rate is the percentage of users who fell victim to the attack compared to the number of attacks sent in that specific campaign

The "Click Rate per Org" expresses the percentage of clicks relative to the number of attacks sent for each campaign, based on the grouping criteria chosen by the organization (e.g., Sector, Department, Business Function, etc.). By clicking on the three dots at the top right, you can also view the data relative to the parameters chosen for Org_2 and Org_3 (for example: role or business function).

The "Click Rate per Team" graph analyzes, for each team, the click rate in each campaign, providing the percentage and highlighting in red the campaigns that were the most critical.

The "Click Rate per Template" analyzes all templates, both active ones (used in the current campaign) and inactive ones (used in previous campaigns). The report also includes absolute values, the number of times that particular template has been used, and the total clicks received.

The "Click Rate per Target" displays the click rate of each team member. The report highlights the department to which they belong, the absolute values of attacks sent and clicks made, whether the user clicked in the last campaign, and their risk group. Depending on the choices made by the client organization, this report may be shown in anonymized form or with clear user names.

Within this section you can export data from all campaigns or from specific campaigns. You can generate a report in PPT format or export the global data in CSV format.

Instead, the CSV file analyzes for each template of each campaign the behavior of each user.

The “Report Remediation” tab displays data on remediation campaigns, targeted on certain users in order to increase their resilience to cyber attacks.

Remediation data are visible only when the remediation is completed.

By clicking on “ Details” of a specific remediation you can see the targets affected, the template(s) used.

Clicking on “Report” can generate a PPT with the results of the remediation, while clicking on “export” can generate a zipper file with all the details of user interactions with the remediation templates.