Partner's Guide: Key Steps to Onboard Your Customers Effectively
Welcome to the Partner's Guide for onboarding your customers to the Security Awareness Training platform. This comprehensive guide will walk you through each step of the process, ensuring a smooth and successful rollout for your customers. By following this guide, you'll be able to efficiently set up customer accounts, initiate training and phishing campaigns, and maintain ongoing engagement and communication.
Key Steps to Onboard Your Customers Effectively:
When you're ready to introduce the Platform to your customers, here's your checklist for a smooth customer rollout:
- Create Customer Company
- Onboarding Tour Video
- Whitelisting
- Set up Phish Reporter
- Importing Learners
- Creating Departments
- Launching a Baseline Phishing Test
- Internal Communications
- Creating a Training Campaign
- Campaign Monitoring & Reporting
Create Customer Company
Creating a company is easy. Follow these simple steps:
How to Create a Company:
- Login and access your Partner 'Admin dashboard'.
- Navigate to the 'Company' section.
- Click on the 'Actions' button in the top right corner.
- Select 'Create Company' from the drop-down menu.
- Select Company Type: Choose 'Customer'
- Provide the required Company Data.
- Select the 'Premium' License type.
- Specify the number of licenses needed.
- Populate Information for the Company Manager.
- Click ‘Save’.
*The Customer company will automatically display under your 'Customer' section.
For detailed guidance, explore these guides.
Schedule Training Session
Arrange a training session with your Customer's Manager or team, or share our Onboarding Tour Video for a comprehensive introduction. This video is a great resource for onboarding your customers and kickstarting their journey today!
Watch our video: Onboarding Tour Video
Whitelisting
First Things First:
Ensure that whitelisting is fully completed and set up within your customer's organisation. This ensures that their training campaigns and phishing simulator emails reach their intended recipients without any hiccups.
- Verify your customers' email security gateway systems and spam filters.
- Follow system-specific whitelisting guides if they use additional email security systems like Microsoft Defender, Bitdefender, Proofpoint, ESET, Spam Titan, or others.
- Run a test campaign targeting a small group to confirm successful email delivery.
- Regularly check-in (at least quarterly) to ensure their whitelisting remains up to date.
For detailed guidance, explore these Whitelisting guides.
Set up Phish Reporter
Set up the Phish Reporter service, which lets learners report malicious emails during simulated phishing campaigns. Managers can then see who reported the suspicious emails.
For detailed guidance, explore our Phish Reporter Service guide.
Importing Learners
Adding new learners to the platform is super easy with multiple options available depending on your preference.
How to Import Learners on behalf of your Customer:
- Access your Partner 'Admin Dashboard'.
- Navigate to your 'Company' section.
- Select the 'Customer' you wish to manage.
- Click on the 'Actions' button.
- Choose 'Manage Company' to enter manage mode.
- Within manage mode, navigate to the customer's 'Users' section
- Click on the 'Add Users' button located top right corner.
Account Managers can:
- Manually 'Add User' one at a time,
- 'Import Users' in bulk via a CSV file, or
- 'Sync Users' using Active Directory Integration.
For detailed guidance, explore our Adding New Learners guide.
Creating Departments
Organise learners by creating departments to measure security culture between different groups.
For detailed guidance, explore our Creating Departments guide.
Launching a Baseline Phishing Test
Once your customer's learners are imported, launch a baseline phishing test before any training campaigns. This helps assess the current level of phishing attack readiness.
For detailed guidance, explore these guides.
Internal Communications
Effective communication is crucial for the success of the security awareness training program. After launching the baseline test, notify the organisation about the new cyber security awareness training program. Send out a 'Cyber Security Awareness Programme Announcement' email to drive engagement and participation.
For detailed guidance, explore our Employee Communications for additional details on how to communicate effectively with your learners.
Creating a Training Campaign
Both you and your customer managers can initiate security awareness programs and set up training and phishing campaigns.
How to Create a Training Campaign on behalf of your Customer:
- Access your Partner 'Admin Dashboard'.
- Navigate to your 'Company' section.
- Select the 'Customer' you wish to manage.
- Click on the 'Actions' button.
- Choose 'Manage Company' to enter manage mode.
- Within manage mode, navigate to the customer's 'Training' section
- Select the 'Campaigns' Tab.
- Click 'Create Camapign'
For detailed guidance, explore our Creating a Training Campaign guide.
Campaign Monitoring & Reporting
After creating and launching campaigns, Account Managers can produce and download reports detailing the progress, scoring and outcomes of phishing and training campaigns.
How to Download Reports on behalf of your Customer:
- Access your Partner 'Admin Dashboard'.
- Navigate to your 'Company' section.
- Select the 'Customer' you wish to manage.
- Click on the 'Actions' button.
- Choose 'Manage Company' to enter manage mode.
- Within manage mode, navigate to the customer's 'Report' section
- Select Phishing Campaigns or Training Campaigns template.
- Choose the type of report: a data-rich 'CSV' report or an executive summary style 'PDF'.
- Select which campaign you want to create the report for: 'Individual', 'Multiple', or 'All' campaigns, by clicking the 'Select All' checkbox.
- Click the 'Get Report' button.
For detailed guidance, explore our Reporting guide for more information about producing detailed campaign reports!
Pre-Launch Notifications
First-time learners will receive two system emails from app.goldphish.com:
- Learner welcome Email: Onboarding email sent to new learners when the first training campaign is launched. Learners are provided with a URL to the platform as well as unique login credentials.
- Training campaign Welcome Email: This email is sent to all learners when a new training campaign is launched and they have the training to complete.
Post-Launch Notifications
- Training Campaign Results: Results of a recently ended training campaign are automatically emailed to the company manager.
NOTE: For security purposes, the initial token/link received in the onboarding email is only valid for 7 days. A learner logging in for the first time after this period will receive an 'Invalid token' message and will need to click on the 'Forgot your password?' link to receive another onboarding email.
For detailed guidance, explore our guide on Overview of System Emails.
RESOURCES
Below are some useful tools to help guide and support your customer in their security awareness training plan:
- Public Portal: Communication tools to deploy across internal comms channels (e.g., Posters) to support your internal security awareness communications plan.
- Full Communications Calendar
- Guide: How to Make Security Training Fun: 6 Tips to Boost Employee Engagement
- Security Cultures: Stick vs Carrot methods
- Why do I need Security Awareness Training: The importance of SAT
- Support Center: Guides on how to best manage the platform.