Reference
Security Awareness Training glossary
Terms used in Security Awareness Training and its documentation.
Applies to Security Awareness Training as it works today. Moraph updates the platform continuously, and this page is reviewed when it changes.
Terms used in Security Awareness Training and its documentation.
| Term | Meaning |
|---|---|
| Simulation | A safe, fake phishing email sent to staff to test and teach how they respond. |
| Campaign | A planned set of simulations or training sent to chosen groups over set dates. |
| Allow-listing | Mail settings that let simulations reach inboxes without being filtered, so results reflect people and not mail filtering. |
| Phish Alert Button | KnowBe4's add-in that staff use to report suspicious email from Outlook or Gmail. |
| Remedial training | Short training assigned automatically to someone who clicks or enters data in a simulation. |
| Repeat clicker | A person who fails simulations more than once under the policy your institution sets. |
| Role-based group | Staff grouped by exposure, such as wire operations or executive assistants, so they get suitable scenarios. |
| Business email compromise | Fraud where an attacker impersonates an executive, vendor or customer by email to redirect payments or data. |
| Program evidence | Training completions, campaign results and program changes assembled for examiners, auditors and insurers. |
Was this page helpful?
Report a problem with this page
Need help with your own setup rather than this page? Raise a support ticket.