User Awareness

The User Awareness domain provides automated metrics and measurement for your user awareness program.

Panaseer combines data from security, IT and business tools, specifically user awareness and people data, to enhance visibility into your user awareness program. It’s enriched with business context to allow you to more efficiently address business risk.

Benefits

View your awareness program through the context of people, not just email addresses. Get context on how users perform over time, who manages them, what devices they use, and what applications they have access to.
Prioritize your user awareness training program. Identify risks such as senior stakeholders in roles with access to sensitive data, phishing test performance, or business units that are under-performing compared to others.
See historical trends and repeating patterns to see if people learn from their mistakes. “Repeat offenders” metrics show consecutive phishing test failures by the same people.
Celebrate positive behaviors to increase user awareness and build a stronger security culture. By measuring who is reporting phishing test emails, you can identify and reward your champions.
Get context on the mission-critical business processes or operations a particular cloud environment supports.

Spotlight metric

User awareness KPIS over time

Analyze how user awareness KPI performance is trending over time.

These metrics show how different parts of the business are performing against user awareness KPIs you’ve set for the users clicking phishing links. This data can be segmented by business dimensions such as geography, business unit or job role.

Example connectors

KnowBe4

Proofpoint

Cofense

Available metrics

Type	Name	Description
Informational	Active phishing campaigns	The number of active phishing awareness campaigns
Informational	Phishing links clicked	The number of links clicked in phishing awareness emails
Informational	Phishing emails sent	The number of phishing emails sent for all awareness campaigns
Informational	Phishing emails sent for active campaigns	The number of phishing emails sent for currently active awareness campaign
Informational	Employees clicked multiple links	The number of employees who clicked a URL on more than one phishing awareness email
Informational	Employees clicked links	The number of employees who clicked a URL on one or more phishing awareness emails
Coverage	Employees not included in phishing awareness	The number of eligible employees that have not been sent any phishing emails
Policy	Employees failed phishing test	The number of employees who failed a phishing test
Policy	Employees repeatedly failed phishing test	The number of employees who failed a phishing test more than once
Informational	Employees sent phishing test	The number of employees that have been sent one or more phishing awareness emails
Informational	Employees received phishing test	The number of employees that have received one or more phishing awareness emails
Informational	Employees for phishing awareness campaigns	The number of employees with email addresses eligible for phishing awareness tests
Informational	Total number of reports of suspected phishing emails	Total number of reports of suspected phishing emails
Informational	The count of distinct users who have reported a suspected phishing email	The number of unique users who have made at least one report of a suspected phishing emai
Informational	Phishing links clicked	The percentage of phishing links clicked per phishing emails sent
Informational	Employees clicked multiple links	The percentage of tested employees who clicked a URL on more than one phishing email
Informational	Employees clicked link	The percentage of tested employees who clicked a URL on one or more phishing awareness emailS
Coverage	Employees not included in phishing awareness campaign	The percentage of eligible employees that have not been sent any phishing emails
Policy	Employees failed phishing test	The percentage of employees who failed a phishing test
Policy	Employees repeatedly failed phishing test	The percentage of employees who failed a phishing test more than once
Informational	Employees received phishing test	The percentage of eligible employees that have received one or more phishing emails
Informational	Users Reporting Suspected Phishing Emails	The percentage of users reporting suspected phishing emails
Compound risk	Device coverage and Vulnerabilities with owner phishing tests	The number of devices with vulnerabilities and who's owner has received a phishing test

New metrics for 2026

Type	Name	Description
Policy	User Training Completion	Monitors timely completion of assigned cybersecurity training
Diagnostic	Employees who passed user training	The percentage of employees who have passed user training
Diagnostic	Employees who completed user training	The percentage of employees who have completed user training
Diagnostic	Employees who completed training past SLA deadline	The percentage of employees who completed user training past the SLA deadline
Informational	Employees who passed user training	The number of employees who passed user training
Informational	Employees enrolled in user training	The number of employees enrolled in user training
Informational	Employees who completed user training	The number of employees who completed user training
Informational	Employees who completed training past SLA deadline	The number of employees who completed user training past the SLA deadline
Compound Risk	Employees with privileged access accounts who have not completed phishing training	The number of employees with privilege access accounts who have not completed phishing trainings that were active within the last 30 days
Coverage	Employees not sent any phishing tests	The percentage of eligible employees who were not sent any phishing awareness tests
Informational	Employees for phishing awareness campaigns	The number of employees eligible for phishing awareness campaigns
Informational	Phishing awareness campaigns	The number of phishing awareness campaigns

Privileged Access Management metrics

Cloud Configuration metrics

Next domain