Hey everyone! We're currently utilizing the KnowBe4 cybersecurity awareness platform, but we're still figuring out the best way to onboard new employees. Right now, the training is mainly driven by emails. Once we set up a user's email account, they automatically start receiving awareness training. We also conduct a quarterly awareness campaign for all current users. I'm looking for some advice on the following points:
- What's your usual process for onboarding new employees into cybersecurity training?
- Do you trigger training through IAM governance, AD/Entra sync, or just email creation?
- If a user receives an email later on (like after a few months), how can we tell if they're a new hire or an existing employee who just got an email?
Any insightful suggestions would be greatly appreciated!
1 Answer
One effective method is to use AD sync to initiate KnowBe4 enrollment by utilizing SCIM or an API. You can assign users to specific training campaigns based on their department or role. If someone receives their email later, a good way to identify them is by checking the last login or account creation date in AD to distinguish between new hires and existing employees. Automating the process to enroll users into training right after their email is created can streamline things even further.
I hear you! We have some automation too. Once an email account is set up, users get added to a "New Hires" group that starts the baseline training. The tricky part is digging through to see who’s a true new hire versus an existing employee who just got an email.
That's a good point! But one challenge we faced was that we couldn't easily remove someone from a "new hire" group if it’s synced through AD, which complicated moving them to a quarterly training pipeline. We used to rotate our new hire training group in AD every six months which helped, but it wasn’t a perfect solution.