How do I communicate to my company about simulations and training?

Why this matters

It's a good idea to make your employees aware of a new security initiative before it starts. Employees who understand what's happening, and why, are more open to it and less likely to be confused or caught off guard by a simulation or a training email.

Before you send: set up your support protocol

This is the most important step, and it's easy to skip.

If your employees don't know who to ask, they'll often end up contacting Moxso support directly with questions about a simulation or a training video. You're closest to your own rollout and setup, so you can usually answer a question faster than we can, which is why employees should always come to you first, not Moxso.

Set the protocol before you launch:

Tell employees clearly, in your internal communication, that questions and concerns go to you first, not to Moxso.
Include your name and an email address they can reach you at. Employees can't contact someone they can't identify.
Look into the question or issue yourself first. Most questions are quick to investigate once you know the context (which employee, which email, which training automation).
If you can't resolve it or you think something's genuinely wrong, contact Moxso support and we'll help you from there.

This protocol also makes your own rollout and maintenance easier to manage. When employees know exactly who owns the process internally, most questions get resolved in minutes, and only the issues that actually need Moxso's help make their way to us.

Email templates

We've written two internal letters you can use and customize as needed. Both include a line telling employees who to contact – just make sure to fill in your own name and email address before sending.

Template 1: Introducing simulations and training

Dear colleagues,

Recently, all employees received a simulated phishing email from Moxso. We have now reviewed the results and seen how many links were clicked.

Based on this, we will be rolling out Moxso's cybersecurity awareness training to help reduce the risk of real phishing attacks, which can reach any inbox at any time.

As frequently reported in the media, cyber threats are increasing, and many attacks succeed because of human error. By working together and strengthening our awareness, we can better protect both our systems and our colleagues, and reduce the risk of security incidents at [company name].

The training also supports our compliance with the NIS2 regulatory requirements.

Over the coming weeks, all employees will be asked to complete a mandatory set of short videos and courses. These will be sent by email from Moxso. Each module takes approximately 5-10 minutes to complete, and your participation is essential to our shared security.

You will soon receive an introductory email from Moxso with login details for their training platform. In addition to the required modules, the portal offers a range of optional videos, quizzes, and courses for anyone who wishes to explore further.

If you have any questions, or something doesn't look right, contact [name] at [email address]. Please reach out to us directly rather than to Moxso. We're here to help and we'll involve Moxso if we need to.

Cybersecurity awareness is a key part of keeping [company name] safe. Thank you for your cooperation, and we look forward to seeing your progress.

Kind regards,

[Name]

Template 2: Introducing the reporting add-in

Dear colleagues,

To strengthen our security against phishing attacks, we have implemented a new add-in into your email that makes it easy and safe to report suspicious emails. This add-in can be found in your email inbox and is already installed and ready to use.

To use the add-in, the suspicious email must be selected. Look for the Moxso logo to open the tool. When you report an email via the add-in, it is automatically deleted from your inbox. Therefore, make sure it's an email you don't need to read again.

It is extremely important that you only use the add-in to report suspicious emails, as forwarding these emails is an unnecessary security risk.

If you're unsure about an email or have any questions about the add-in, contact [name] at [email address] first. We can look into it together, and we'll loop in Moxso if it turns out to be something they need to help with.

Thank you for your cooperation in securing our email environment!