Run a phishing-awareness programme
A simulation approved by a second person, sent only to domains you own, with results per group, never per person.
- 1BAITSet up BAIT
Set up your programme
Who: Admins only.
When you first open BAIT, Home shows Set up your programme: "Three steps, about 15 minutes. Nothing is sent until a second person approves your first campaign." It has a counter such as "1 of 3 done". Each step has a Start button, or…
Open this step → - 2BAITSet up BAIT
Verify a receiving domain
Who: Admins only.
Choose Settings (the sliders icon at the top right).
Open this step → - 3BAITSet up BAIT
Import your employee groups
Who: Admins only.
BAIT does not keep its own employee list. Employees and their groups come from your directory, which you connect in MESH. MESH refreshes people and groups from your directory on its own schedule (see Connecting sources). BAIT takes the…
Open this step → - 4BAITSet up BAIT
Name your data protection officer
Who: Admins only.
Results in BAIT are per group. Identifying an individual behind a result needs a separate request, and BAIT refuses every such request until a Data Protection Officer is named.
Open this step → - 5BAITSet up BAIT
Add the second member of your team
Nobody can approve their own campaign, so you need at least two people on the programme team before anything can be sent.
Open this step → - 6BAITScenarios
Choose a scenario from the library
Who: Everyone on the programme team.
Choose Marketplace.
Open this step → - 7BAITScenarios
Write or adapt the email
Who: Admins. Users can open the editor and read every tab; instead of the save and approval buttons they see "Only administrators of this BAIT installation can do this."
In the Marketplace, choose + New scenario to start from scratch, or choose a card to edit an existing scenario.
Open this step → - 8BAITCampaigns
Prepare the campaign
Who: Admins and Users.
The New campaign wizard has five steps: Goal, Audience, Email, Schedule and Review. The steps are listed on the left. A step is ticked once it is complete. You can go back to any step, and forward once every earlier step is complete.…
Open this step → - 9BAITCampaigns
Approve it, or send it back
Who: The person chosen as approver. They must not be the person who created the campaign.
Approving a campaign schedules it. Nothing is sent before the start date.
Open this step → - 10BAITPeople and reports
Read the results per group
Reports shows the results of the last 12 months, all aggregated per group or per campaign.
Open this step → - 11BAITPeople and reports
Export the board report
Who: Admins and Users.
The board report summarises your programme for your management.
Open this step →