KnowBe4, a leader in cybersecurity awareness training, has made significant strides in enhancing its suite of Artificial Intelligence Defense Agents (AIDA) by unveiling a new AI-powered assessment tool. This innovative tool is crafted to assist organizations in measuring human cyber risk with greater precision, addressing a crucial component of cybersecurity that is often overlooked: the human element.
The introduction of the Custom SAPA (Security Awareness Proficiency Assessment) AI Agent marks a pivotal development for KnowBe4. This new agent specializes in generating customized security awareness assessments that are tailored to an organization’s unique technology environment, operational policies, and workflows. The intent behind this launch is to rectify the inadequacies inherent in traditional standardized testing methods. By providing security leaders with data that better represents their individual security postures, KnowBe4 is supporting organizations in crafting more effective security strategies.
Historically, the SAPA framework has been utilized as a benchmark for gauging employees’ security awareness levels. While these assessments have served to establish foundational knowledge, the necessity for tools that are aligned with specific security environments and operational contexts has grown increasingly apparent. Recognizing this gap, knowBe4’s new offering aims to meet the evolving needs of organizations that are striving for more actionable insights in understanding their cybersecurity landscape.
Operating within the AIDA platform, the Custom SAPA Agent leverages information specific to an organization—its infrastructure, policies, and the industry it operates in—to dynamically create assessment questions. This approach is designed to mirror real-world scenarios that employees may face in their day-to-day work. By doing so, the agent attempts to cultivate a more realistic understanding of how employees comprehend and react to security challenges relevant to their actual work environments.
Bryan Palma, the CEO of KnowBe4, articulated the primary benefit of this new tool, emphasizing that it equips security teams with data that bears substantial relevance. “Security leaders often struggle to justify training and remediation decisions because they’re working with generalized assessment data that doesn’t reflect their organization’s reality,” Palma stated. This perspective highlights a common challenge faced by security professionals; the difficulty in communicating risk and deciding on necessary training approaches is often rooted in the use of data that lacks specificity.
The Custom SAPA Agent aims to transcend these limitations by delivering granular insights into the security comprehension of employees, thus enabling security teams to prioritize remediation effectively. This capacity for precise assessment ensures that investment decisions in training and security measures are based on meaningful data rather than assumptions.
Furthermore, KnowBe4 has designed the new agent to grant administrators comprehensive visibility over the questions generated. This feature allows for the ongoing review and refinement of assessments to ensure that they remain relevant to the workforce’s changing needs. The platform also offers per-question response analytics, enabling security teams to identify knowledge gaps, monitor engagement with security concepts, and target areas where human risk may be elevated.
Greg Kras, KnowBe4’s Chief Product Officer, expressed the vision behind this tool. He indicated that the goal is to transform assessments from mere proficiency checks into diagnostic instruments that provide actionable insights for security training strategies. By aligning assessment questions with an organization’s real-world controls and policies, the Custom SAPA Agent enhances the relevance and effectiveness of training programs, enabling security leaders to tackle the most pressing risks their organizations face.
Moreover, the results from these assessments can seamlessly inform follow-up Security Awareness Training (SAT) campaigns. This ensures that remediation efforts are driven not just by theoretical concerns but by data that reflects the actual risk landscape of the organization.
It is noteworthy that the creation of the Custom SAPA Agent draws on over five years of research and data compiled from more than 50,000 organizations and five million SAPA completions. This extensive database has allowed KnowBe4 to evolve its framework into a more adaptive assessment tool suitable for IT and information security teams.
The Custom SAPA Agent is currently available to customers who possess an AIDA subscription, representing a significant advance in the mission of fostering a culture of cybersecurity awareness across organizations. As the threat landscape continues to evolve, tools like the Custom SAPA Agent become critical in enhancing an organization’s resilience against cyber threats through informed and tailored training implementations.