KnowBe4v1.0.3

A security operations analyst pulls every KnowBe4 user to identify which employees still need their first simulated phishing training. They cross-reference accounts with group membership to prioritize high-risk departments such as finance and executive assistants, then trigger targeted enrollment in the security awareness program.

A compliance officer at a healthcare provider uses list_users and list_groups to produce evidence that all staff completed required HIPAA security awareness training. They filter by group to separate clinical and administrative teams and export the data into quarterly audit packages for regulators.

An HR operations specialist builds a recurring report showing training completion percentages across business units. By listing groups and users with expanded group data, they surface teams that lag behind and send targeted reminders before the training deadline.

After a real phishing incident, a security engineer checks the affected user's KnowBe4 profile and training history to determine whether they had failed the relevant simulation. They then assign remedial training and monitor progress to closure as part of the incident response process.

An IT director performs a quarterly subscription and license usage review using get_account to confirm seat counts align with current headcount. They then reconcile active users against the directory to avoid paying for unused licenses or falling short on coverage.

KnowBe4 sells subscription access to simulated phishing and security training content on a per-user, per-year basis. Customers pay recurring fees based on seat count, then use platform data to measure and improve employee resilience against social engineering attacks.

Managed service providers use KnowBe4 APIs to monitor and administer security awareness programs on behalf of many client organizations. They aggregate phish-prone percentages and training completion rates into client-facing dashboards and recurring advisory services.

A GRC or compliance automation platform integrates KnowBe4 data to prove that workforce training controls are continuously met. The vendor maps training completion records to frameworks like SOC 2, HIPAA, or ISO 27001 and surfaces gaps inside its own compliance dashboards.