Prepare
Guardian Aware
Security Awareness Training. Human Behavioral Analytics. Measurable Risk Reduction.
Guardian Aware is managed security awareness training built on human behavioral analytics. It turns traditional security training into education that changes behavior, and it measures the outcome over time.
Security awareness training isn’t optional. It’s Control 14 in CIS Controls v8.1, part of NIST CSF 2.0, and required under HIPAA, PCI DSS, SOC 2, ISO 27001, CMMC, GDPR, and NIS2. It’s also a question on most cyber insurance applications. If you can’t prove your people are trained, you can’t prove you’re compliant, and your insurer will notice.
Proving training happened is the baseline. The real question is whether it reduces human risk.
When training comes bundled into general IT or MSP services, what gets measured is often completion: who finished the module and when. Guardian Aware measures risk reduction. It can run alongside the training you already have in place.
01 · Guardian Aware
Completion vs. Risk Reduction
Traditional security training often fails to change behavior or reduce cyber risk. Guardian Aware focuses on the human element, which is often the greatest risk to a security program.
That changes the question leadership should be asking about training.
Not: “Did everyone complete the annual training?”
But: “Can we show that human risk is being reduced?”
Guardian Aware is built to answer the second question.
02 · Guardian Aware
How It Works
Human Behavioral Analytics - Guardian Aware builds a security training plan around your organization’s specific risks. The platform educates users, nudges them toward safer behavior, and measures your organization's security culture.
Campaign Targeting - How campaigns are built depends on whether Aware is paired with Guardian's email security.
- With Guardian email security: Aware analyzes the email your users actually receive, including the vendors they work with, the topics that come up often, and what lands in their junk folders, and builds campaigns around it.
- Standalone: Guardian profiles your business and draws from a library of hundreds of campaigns aligned to common business email, compliance topics, industries, and market segments.
Phishing Simulations - Simulations typically run monthly, in line with industry recommendations. Multiple simulations run at the same time, so employees don't all receive the same test and can't tip each other off.
Gamified Training - The learning experience is gamified to increase employee adoption and engagement.
03 · Guardian Aware
How It’s Managed
Guardian Aware is fully managed. After setup, Guardian's team administers the program.
Setup depends on your email environment. If you use Guardian's email security, Aware is already connected and delivers simulations directly to user mailboxes. If not, your IT team allowlists Guardian's phishing domains and IPs. Aware supports Microsoft 365 and Google Workspace.
04 · Guardian Aware
Reporting
Behavior Over Time - Guardian Aware tracks how user behavior changes over time, giving you a measurable view of whether human risk is going down.
Compliance-Ready Reporting - Reporting maps to the frameworks above and supports the training requirements you face from customers, partners, investors, regulators, and cyber insurers. Reports can be stored or pulled from the platform to cover your audit period.
Delivery - Reports are available in the Guardian Aware portal or delivered on a schedule, to your team or to the managers of individual departments.
05 · Guardian Aware
Who It’s For
Guardian Aware has no minimum seat count. It’s designed for organizations that:
- Maintain compliance obligations
- Face cyber insurance scrutiny
- Want a measurable reduction in human risk
Keep exploring
