Training

To choose a training type for your users, do as follows:

• Phish Threat training: When users open the attack email, they're enrolled in Sophos' training content.

  We recommend you select this option.

• Use my own training: When users open the attack email, they're enrolled in your hosted content.

  If you select this option, users who click the attack email are redirected to the Sophos - Security awareness training page. On that page, users must click Go to Training to go to your custom training page.

• No training: When users open the attack email and click any link in the email, they're redirected to a simulated "404 Not Found" page.

Users who are caught by a simulated attack are automatically enrolled in your selected training modules.

You can do a baseline assessment of your users by opting out of training auto-enrollment.

Attachment campaign training enrollment

Training enrollment is triggered based on how users interact with an email attachment. The behavior varies depending on whether they're using Windows, macOS, or a web browser.

• Windows: Users receive a training enrollment email when they save, open, and edit the email attachment.
• macOS: Users receive a training enrollment email when they save and open the email attachment.
• Web browser: Users receive a training enrollment email when they save and open the email attachment.

Users don't receive training enrollments when they preview the attachment.