About RISMA Systems
RISMA is a GRC platform that brings governance, risk management and compliance together in one place. With a focus on usability and intuitive design, RISMA makes it easy for organizations to manage and document compliance across different systems. The platform is designed to be accessible to both professionals and employees involved in the processes around risk management and control.
Key takeaways
- Automation frees up resources: Moxso's phishing simulations and awareness training have reduced manual tasks, allowing RISMA to focus on growth and development.
- Targeted training gets results: With Moxso, at-risk employees get exactly the training they need, effectively strengthening security.
- Continuous improvement: Click-through rates have been reduced from 17% to 5% through ongoing phishing simulations and training, and results continue to improve.
"I spend 90% of my time developing our own platform. In other words, there is not much time or resources to manage a platform like Moxso. The automated approach therefore fits perfectly into our organization. We always recommend Moxso when we participate in IT audits to our colleagues and competitors who are about to invest in phishing simulations and awareness training."
- Nicolai Juhl Ascanius, CIO
Need for time-saving and targeted training
As a growing company, RISMA has many ongoing projects and limited resources for manual tasks. At the same time, the mission to remain compliant requires a solution that doesn't unnecessarily burden employees or require extensive administration.
Although RISMA has a number of technical security solutions, the human factor remains an important part of the IT security strategy. Therefore, a solution was needed that could strengthen employee awareness and behavior without taking focus away from core tasks.
Automated phishing and targeted remediate training
Moxso has delivered an automated solution that combines phishing simulations, new employee onboarding and awareness training. By using Moxso's remediate training, employees who click on phishing emails immediately receive relevant and tailored training.
This targeted approach has allowed RISMA to focus on the most at-risk employees, while allowing more experienced employees to avoid redundant training. The automation has freed up time for the IT department to dedicate more resources to the growth and development of RISMA's own platform.
A strong security culture without extra administration
When implementing Moxso, the baseline simulation showed a click-through rate of 17%. While not alarming, subsequent training and ongoing simulations have reduced the click-through rate to 5%. This result has been achieved through a combination of targeted training and continuous focus on the employees who need the most support.
Moxso's automated approach has not only improved security, but also enabled RISMA to maintain an effective training effort without spending unnecessary time on administration.