View the organization's overall risk score at a glance
Identify which departments and groups concentrate the highest risk
Track the evolution of risk over time through the history
Detect behavioral trends against phishing with the Historical PAS
Filter the view by department or group for operational focus
Access the risk detail of a specific segment with one click
At the start of each week: to get a quick snapshot of the overall risk status before making operational decisions
After launching a campaign: to see if the risk moved and in which segments
When there is an incident alert: to cross-reference human risk with the current threat context
Navigation: Overview
View the Company's Risk Score
At the top left, a gauge shows the organization's total Risk Score, and below it, Groups with the highest risk, listing the groups that concentrate the highest risk with their value.
View the distribution by Department and Group
To the right of the gauge, two blocks are shown:
Risk score by Department: lists all departments with their risk % and a status icon
Risk score by Group: lists all groups with their risk % and a status icon
Hovering over a row shows a tooltip with the exact score and the caption "Click to see the detail".
Access the Risk Detail of a segment
Click on any department or group in the list. You will be taken to the Risk Detail of the selected segment, where the following is shown:
Gauge with the segment's risk score
Own Risk History with a time chart
Reset button to reset the chart view
View the Historical PAS
At the bottom left, the Historical PAS (Phishing Awareness Score) is shown. It includes an ℹ️ icon that, when clicked, shows an explanation of the calculation:
The PAS is calculated by subtracting the number of successful phishing attempts from the total emails sent, dividing that result by the total emails sent. For example: 100 emails sent, 10 people fell for it → PAS = 90%.
The block also shows:
View the Risk History
At the bottom right, the company's Risk History is shown: a line chart with the score's evolution over time, with value labels at each point. It allows identifying trends and the impact of actions taken. Includes icons to expand and download the chart.
Apply filters
Click on the Filters icon (top right of the section). A side panel opens with:
Department: selector with search, allows selecting one or more departments
Groups: selector to filter by group
You must click Save to apply. The entire view updates with the data of the selected segment.
Download the dashboard
Click on the download icon (↓) at the top right to export the current view.
High risk score (close to 100%) → the organization has high exposure. There are employees with frequent risky behaviors who need intervention.
Low risk score (close to 0%) → good sign. Employees are responding well to simulations and completing trainings.
A department with risk much higher than the rest → that segment requires priority attention. It may indicate lack of training, insufficient simulations, or a more vulnerable user profile.
The history shows an increasing trend → risk is increasing. Check if there are active campaigns and if assigned courses are being completed.
The history shows a decreasing trend → the program is working. This is good data to show the client as evidence of impact.
Low Historical PAS → many employees are falling for simulations. Increase the frequency or variety of campaigns.
Overall risk rising → check if there are ongoing campaigns, if assigned courses have low completion, and adjust the strategy.
Low Historical PAS → launch a phishing campaign targeted at the groups with the highest click rate.
Everything green → keep up the pace
Department with high risk → If you see a department with high risk, identify the users in that segment and take action from the simulation and academy tools.
🔜 Soon you will be able to assign courses or include users in campaigns directly from this view. If this is a priority for your organization, vote for the request here
It is the Phishing Awareness Score. It measures how effective the organization is at resisting phishing attempts. The higher, the better: it means fewer employees fell for simulations.
Yes, it is the same indicator. In the Benchmark it is shown with comparative context against the industry.
Yes. Clicking on the department in the list takes you to the Risk Detail of that segment, which includes its own history.
The score is updated automatically on a daily basis.
💬 Do you have feedback about this feature or want to request improvements? Let us know at roadmap.whalemate.com/roadmap
