Quick Start Guide: Welcome to Your Security Awareness Platform 👋

Whether you’re just getting started or need a quick refresher, this guide walks you through the key steps to set up your account. Follow each phase in order, and you’ll have your programme live, tested, and delivering value in no time.

In This Article:

🎥 Platform Walkthrough Video

⚙️ Phase 1: Basic setup

⚙️ Phase 2: Technical setup

👥 Phase 3: Adding Learners

🎣 Phase 4: Testing

📣 Phase 5: Internal Communication

🎓 Phase 6: Creating Your First Training Campaign

📊 Phase 7: Accessing & Monitoring Reports

🆓 Free Resources: Public Portal

🎥Platform Walkthrough

Before diving in, watch our onboarding video for a quick overview of the Admin Manager journey. It only takes a few minutes and gives you the full picture before you start clicking around.

⚙️Phase 1: Basic Setup

1. Sign in:

• Use the link in your Manager Welcome Email, or go directly to app.goldphish.com.

2. Language & Branding (Whitelabelling)

Make the platform feel like home, so your team recognises the emails they receive.

• Set Language: Go to Company > Actions > Edit Company.
• Whitelabelling: Upload your logo and apply your brand colours.
• Customise: Personalise system emails to match your organisation's tone.

⚙️Phase 2: Technical Setup

1. Whitelisting ( Do Not Skip )

Before launching any campaigns, involve your IT team. Proper whitelisting ensures phishing simulations and system emails:

• Reach inboxes
• Aren’t blocked by filters
• Don’t land in junk

2. Set Up The Phish Reporter

This is your "Human Firewall" and your primary metric for success. There are two setup options depending on your environment:

• Option A ( M365): Microsoft Report Button (One-click in Outlook)
• Option B (Google Workspace & others): Google Workspace (Forwarding to a dedicated mailbox)

👥 Phase 3: Adding Learners

Organising learners by department gives you clearer insights, highlights high-risk teams, and helps tailor future training.

Go to Users > Add Users

Choose our method:

1. Manually add users one at a time,
2. Import Users in bulk via a CSV file, or 
3. Sync Users using Active Directory Integration.

🎣 Phase 4: Testing

1. Internal Test Campaign

Once IT confirms whitelisting and the Phish Reporter has been set up, it’s time to confirm everything is working as expected. Send a phishing campaign to 2–3 admins

• The Goal: Confirm the email arrives in the inbox, opens, clicks work, and the "Reported emails"  track correctly in the dashboard.
• If the email lands in spam or isn’t delivered, ask IT to review the whitelisting settings.

2. The Baseline Phishing Test

Now, send one simple phishing test to everyone.

• The Goal: This creates a "Starting Risk Level" before training begins and gives you a clean benchmark to measure how much your team improves after training.

📣 Phase 5: Internal Communication

Now that testing and your baseline are complete, it’s time to send out a communication outside of the platform (for example, an internal email).

👉🏼Use our  Pre- Programme Templates to let everyone know what’s coming.

Why this matters

Clear, positive communication increases engagement, reduces resistance, and helps employees understand this programme is about support - not punishment.

Keep the messaging positive:

• “We’re building a safer culture together.”
• Not: “We’re testing you.”

🎓 Phase 6: Creating Your First Training Campaign

1. Launch your First Training Campaign

• Go to Training > Campaigns > Create Campaign
• Steps: Select Content → Recipients → Schedule → Complete setup → Launch

2. Learner Onboarding:

When your first campaign launches, new learners automatically receive:

• Learner Welcome Email: Sets up login & password
• Training Campaign Welcome Email: Nudges completion

Phase 7: Accessing & Monitoring Reports

Numbers don't lie. Regularly check your progress:

Go to Reports > Select

• Phishing Reports: See risk trends, who clicked vs. who reported.
• Training Reports: See engagement levels and completion rates.

*Formats: Download PDFs for executive summaries or CSVs for deep-dive data.

Free Resources: Public Portal

Visit our Public Portal on our website under Resources. You'll find

📅 12-month Comms Calendar

🖼️ Posters & Infographics

✉️ "Cyber Tip" templates for internal newsletters

Ways organisations use these creatively:

• Office posters
• Screensavers
• Internal newsletters
• Instant messaging
• Weekly Monday “Cyber Tip” from leadership

Keep security visible and top of mind. 🚀💫

🎉Congratulations - You’re Live!   

That’s it. Easy peasy 🍋

From here:

• Keep training regular (drip-feed monthly, bi - monthly)
• Communicate outside the platform
• Encourage reporting of suspicious emails
• Celebrate high completion and reporting rates🎉

Because real security awareness isn’t about catching people out - it’s about building habits that stick.

Need help? Just pop us a message via the chatbot or email support.