Quick Start Guide: Welcome to Your Security Awareness Platform 👋

Whether you’re just getting started or need a quick refresher, this guide walks you through the key steps to set up your account. Follow each phase in order, and you’ll have your programme live, tested, and delivering value in no time.

In This Article:

🎥 Platform Walkthrough Video

⚙️ Phase 1: Basic setup

⚙️ Phase 2: Technical setup

👥 Phase 3: Adding Learners

🎣 Phase 4: Testing

🎓 Phase 5: Creating Your First Training Campaign

📊 Phase 6: Accessing & Monitoring Reports

🆓 Free Resources: Public Portal

🎥Platform Walkthrough

Before diving in, watch our onboarding video for a quick overview of the Admin Manager journey. It only takes a few minutes and gives you the full picture before you start clicking around.

⚙️Phase 1: Basic Setup

1. Sign in:

• Use the link in your Manager Welcome Email, or go directly to app.goldphish.com.

2. Language & Branding (Whitelabelling)

Make the platform feel like home, so your team recognises the emails they receive.

• Set Language: Go to Company > Actions > Edit Company.
• Whitelabelling: Upload your logo and apply your brand colours.
• Customise: Personalise system emails to match your organisation's tone.

⚙️Phase 2: Technical Setup

1. Whitelisting

Do not skip this. Before launching any campaigns, involve your IT team. Proper whitelisting ensures phishing simulations and system emails:

• Reach inboxes
• Aren’t blocked by filters
• Don’t land in junk

2. Set Up The Phish Reporter

This is your "Human Firewall" and your primary metric for success. There are two setup options depending on your environment:

• Option A ( M365): Microsoft Report Button (One-click in Outlook)
• Option B (Google Workspace & others): Google Workspace (Forwarding to a dedicated mailbox)

👥 Phase 3: Adding Learners

Organising learners by department gives you clearer insights, highlights high-risk teams, and helps tailor future training.

Go to Users > Add Users

Choose our method:

1. Manually add users one at a time,
2. Import Users in bulk via a CSV file, or 
3. Sync Users using Active Directory Integration.

🎣 Phase 4: Testing

1. Internal Test Campaign

Once IT confirms whitelisting and the Phish Reporter has been set up, it’s time to confirm everything is working as expected. Send a phishing campaign to 2–3 admins

• The Goal: Confirm the email arrives in the inbox, opens, clicks work, and the "Reported emails"  track correctly in the dashboard.
• If the email lands in spam or isn’t delivered, ask IT to review the whitelisting settings.

2. The Baseline Phishing Test

Now, send one simple phishing test to everyone.

• The Goal: This creates a "Starting Risk Level" before training begins and gives you a clean benchmark to measure how much your team improves after training.

🎓 Phase 5: Creating Your First Training Campaign

Now for the fun part,  getting your people involved and building a human firewall 🛡️

1. Internal Comms

• Use our Pre- Programme Templates to let everyone know what’s coming. Keep it positive: "We're building a safer culture together," rather than "We're testing you."

2. Launch your First Training Campaign

• Go to Training > Campaigns > Create Campaign
• Select Content > Recipients > Schedule > Complete setup and launch

3. Learner Onboarding:

Once your first campaign is launched, new learners will automatically receive two system emails:

• The Learner Welcome Email, which asks them to set up their login and password.
• The Training Campaign Welcome Email, which nudges them to complete their training.

Phase 6: Accessing & Monitoring Reports

Numbers don't lie. Regularly check your progress:

Go to Reports > Select

• Phishing Reports: See risk trends, who clicked vs. who reported.
• Training Reports: See engagement levels and completion rates.
• Formats: Download PDFs for executive summaries or CSVs for deep-dive data.

Free Resources: Public Portal

Visit our Public Portal on our website under Resources. You'll find

📅 12-month Comms Calendar

🖼️ Posters & Infographics

✉️ "Cyber Tip" templates for internal newsletters

Many organisations use these creatively:

• Office posters
• Screensavers
• Internal newsletters
• Instant messaging
• Weekly Monday “Cyber Tip” from leadership

Keep security visible. Keep it normal.🚀💫

🎉Congratulations - You’re Live!   

That’s it. Easy peasy 🍋

From here:

• Keep training regular (drip-feed monthly, bi - monthly)
• Communicate outside the platform
• Encourage reporting of suspicious emails
• Celebrate high completion and reporting rates🎉

Because real security awareness isn’t about catching people out - it’s about building habits that stick.

Need help? Just pop us a message via the chatbot or email support.