Amnesty International | Gaining insight into awareness levels and behaviour

Organisations often test whether their technical security measures are still effective. Fortunately, more and more are recognising the need to assess the most important factor in information security: their own people. The same applies to Amnesty International. This human rights organisation wanted to gain a clear picture of its current security level, staff behaviour and awareness, in order to identify potential risks and areas of focus for future improvement.

Setting up the security awareness baseline assessment

Our baseline assessment consists of an anonymous online questionnaire. There are no right or wrong answers, it’s simply a practical and accessible way to explore how people behave both inside and outside the organisation. In addition, we send a simulated phishing email to all employees to test real-life behaviour.

Phishing remains the number one cyber threat. The consequences of clicking on a malicious link can be severe — for instance, a data breach caused by stolen information. Awaretrain offers a large collection of generic phishing templates that can be used by any organisation. When someone clicks, they’re redirected to a landing page containing helpful tips on how to avoid similar traps in the future. It’s not just a test — it’s a learning moment.

The results of a phishing simulation are often worrying: on average, 30% of employees click on our simulated phishing emails. The cure? Regular testing and training.

After completing the baseline assessment, we provide a comprehensive report detailing the results and clear action points to help elevate the organisation’s overall security maturity.

Presenting the results

Amnesty International chose to organise a session for all employees. During this session, we discussed modern-day risks and the human side of information security, offering practical advice on how to work more securely — both professionally and personally. The impact of such a session is often significant, helping many employees see information security in a new light.

Client feedback

“Awaretrain takes a professional approach to security and offers a wide range of products aimed at improving information security and raising awareness of digital risks. The Awaretrain team is friendly, proactive and delivers on its promises. The presentation given at our office following the baseline assessment was inspiring and perfectly matched our needs.”

More information

Want to learn more about conducting a security awareness baseline assessment within your organisation? Visit our product page to find out how we can help.