Set up and run a campaign

This section assumes that you have already run a test campaign. If you have not done that yet, set up and run a test campaign.

1.Click Tests/Campaigns > Create Campaign.

Figure 1-1

Figure 1-1

2.In the Getting Started screen, set the following parameters:

a.In the Campaign Name field, enter an applicable name.

b.In the Group(s) drop-down menu, select the applicable test group (including yourself).

c.To only phish individual group members, click the slider bar next to Target Selection.

d.To enroll users that fail a phishing simulation into training, click the slider bar next to Courses.

e.Set the Track Activity duration. We recommend setting the Track Activity duration for a short time (for example, one day).

3.Click Save & Next.

Figure 1-2

Figure 1-2

4.In the Course Auto Enroll screen, select the appropriate training courses for users that fail the phishing simulation. Users that fail the phishing simulation automatically receive a follow-up training enrollment email notification. You can enroll users in any phishing test fail course, review the list below for our recommendations:

•In the Email Click Actions drop-down menu, select the appropriate training course:

oTo test if a user clicks phishing email links, select Test Fail – Phishing.

oTo test if a user opens attachments from an unknown sender, select Test Fail – Email Attachments.

•To test if a user enters data or clicks a fake landing page link, in the Landing Page Actions drop-down menu, select Test Fail ­– Social Engineering.

•To test if a user replies to a phishing email, in the Reply Action drop-down menu, select Test Fail – Social Engineering.

5.Click Save & Next.

Figure 1-3

Figure 1-3

6.In the Phishing Templates screen, choose how the phishing emails look. You can choose one or more phishing templates to use in your campaigns:

a.All previously selected templates are listed on the My Phishing Templates screen. To preview or edit a template, click the triangle next to the Add button. To use a template, click Add, click Save & Next and skip to step 7.

Figure 1-4

Figure 1-4

b.If you do not have any templates yet or want to see more options, click Template Library. We have 10 recommended templates. To filter for them, in the All Templates drop-down list, select Baseline. To preview an email, click the triangle next to the Get button. To use a template for your campaign, next to the applicable template, click Get.

Figure 1-5

Figure 1-5

i.Customize the text and click Save.

ii.To preview the final email, click Preview & Test. Enter the applicable email and choose the appropriate group or target. Click Ok. You receive a notification that the email is accepted, and then the email is sent. If all looks good, in the admin portal, click Close.

iii.To include more than one phishing test in your campaign, repeat step 6b.

7.Click Target Selection and select all applicable users (include yourself). If the group is large, click Filter Targets to search for specific people and click Save & Next.

Note: If the Target Selection slider bar was not enabled in step 2c, you are not be able to select users in the Target Selection screen. All group users are sent the phishing test email. To proceed, click Save & Next and continue to step 8. To enable Target Selection, click Campaign Setup.

Figure 1-6

Figure 1-6

8.An Authorization email is sent to your organization's IT administrator to ensure they are aware and approve of the phishing campaign. All domains and public email services (for example, Gmail) require an authorization email and approval. In the Verify & Run Test screen, enter the name and email of your IT administrator. If your domain has not already been pre-authorized, in the Verify & Run Test screen, enter the name and email address of your IT administrator and then click Finish.

Important: If required, authorization emails must be sent and approved before the campaign begins. To verify this information, click Group Targets.

Figure 1-7

Figure 1-7

9.Click Tests/Campaigns > Manage Tests. New campaigns are listed here in Awaiting Auth or Testing In Progress status. Awaiting Auth status indicates that an authorization email(s) has been delivered. Click the link in this email to start the campaign.