| Table of Contents |
|---|
Entity
In LazyPhish we use entity as a base unit which group employees of a company typically under one management and security management. Your users and user groups are created within entity and all reporting is also tied to entity.
| Tip |
|---|
In most cases only one entity is the best way. We recommend to start with that. |
When to use more than one entity?
If you are a group or concern of companies you can set each entity for each company in your group or concern. You can then evaluate the results for each entity separately.
Also if you are a big company with operations in many countries or if you have other independent sections or lines within your company under different management especially security management you can use a separate entities.
Testing Phishing Campaign (Campaign)
Campaign is an actual campaign performed on your users.
Each campaign is defined by:
Campaign Name defined during creation.
User Group on which the phishing campaign will be performed.
Campaign Template that will be used for the campaign.
Timeframe when the campaign will run selected during campaign creation.
Sending Mode how the blocks will be distributed during the campaign.
Awareness Mode if a redirect to awareness page will be used.
Campaigns can be created and managed in Campaigns section in LazyPhish App.
User Group
User group is a group of users in specific category e.g. Management, Accounting, Service, IT etc. You can use different Testing Phishing Campaign for different groups of users.
For example it make sense only to test employees with permission to approve invoice with Campaign Template that include Campaign Block simulating fake request for invoice approval.
User Groups can be created and managed in Users section in LazyPhish App.
User
User is employee of your company that will be target for the Testing Phishing Campaign. User is therefore meant as a user of systems and applications of your company.
Users can be created and managed in Users section in LazyPhish App.
User Email
User Email is Email Address of User.
Campaign Template
Campaign Templates are predefined templates that are used for Testing Phishing Campaign. These templates consists of a predefined set of Campaign Blocks in specific order. Each campaign template is defined by name, language and description of content, usage and purpose.
List of available campaign templates is in Campaign Templates page in LazyPhish App.
...
Campaign Template Block (Campaign Block)
Campaign Blocks are basic building blocks of campaign templates.
Each block consist of:
Name
Description
Email Template
Landing Page
List and details of campaign blocks that are included in particular templates can be checked by clicking on cog button in actions when on campaign templates overview page.
...
For each block you can see the details and you can select preview of Email template and Landing page. You can also use the paper plan button to send a testing version of the block to your email.
...
Sending Mode
Sending mode is a mode in which the campaign blocks are combined and scheduled during the campaign. There are two modes available:
Randomised (Recommended) - Campaign Blocks are distributed randomly during the campaign for random batches of user. This ensures that users can not share easily their experience with phishing they recently received. We believe that this approach is more effective and reporting is more accurate.
Block by Block - Campaign Blocks are distributed in order as they are presented in the campaign template overview. Blocks are performed one by one in waves.
Campaign (or Testing Phishing Campaign)
ddd
Concurrent Campaigns
Random Target Testing
Custom Template (or Custom Campaign Template)
On-Site Training
Startegy Alignment
LazyPhish Managed Service
This type of service is a solution for companies that want the LazyPhish be fully managed by us. In this case we leverage our experience with phishing awareness and with our tool to design and operate the phishing awareness through phishing testing campaigns.
We will be providing you regular reports with results and modifications for your phishing awareness testing program.
LazyPhish Managed service include:
...
Phishing Awareness Strategy definition based on analyses of your company.
...
Alignment with your IT Security Strategy.
...
Alignment with your IT Security Management.
...
Regular reporting with results and insights.
...
Regular update of LazyPhish testing plan according to the results.
...
Custom campaign block templates created based on your IT environment and applications used in your company. (Volume and extent is agreed in contract individually.)
...
Here you can find basic information about how is the LazyPhish structured. The most important parts are:
Organisational Structure - Logic for setup and management of your organisation and users
Phishing Campaign Structure - Logic for setup and management of your Phishing Testing Campaigns
Domains Validation - Logic for setup and management of domains allowed for Phishing Testing Campaign.