Engaging foremployees,efficient formanagers.
Free trial
k-asap.com

Kaspersky ASAP:
Automated
Security
Awareness
PlatformKaspersky ASAP: Automated Security
Awareness Platform
82% of all cyber-incidents are caused by human error, with companies losing millions as a result.
Traditional training programs are not designed to address this problem, and a new approach is needed.
Say hello to Kaspersky ASAP.

Human error is the biggest cyber
risk

79%

of employees

admit to having engaged in at least one risky
activity within the previous year despite
being aware of the risks *51%of employees

believe their IT departments should becompletely responsible for preventing
their employers from falling victim tocyberattacks*

55%

of enterprises

report threats caused by inappropriate IT
use by employees**

Barriers to launching a security
awareness program that works
Companies are eager to implement security awareness programs, yet many are unhappy with the process as well as the results. SMBs in particular find it challenging, as
they tend not to have the necessary experience or resources.

Inefficientfor students

A burden foradministrators

Perceived as difficult, boring,irrelevant drudgery.

How to create a programand set goals?

It’s all about ‘don’t’
rather than ‘how to’

How to manage
training assignments?

Knowledge is not retained

How to control the progress

Reading and listening
aren’t as effective as doing

How to make sure our staff
are fully engaged?

51%

of small businesses

suffered a security incident due to IT
security policies violation by employees**

26%of employees

say their personal email has the same
password as their work account****

Balancing Risk, Productivity, and Security.”Delinea, 2021** “ITSecurity Economics 2022”, Kaspersky*** https://www.beyondidentity.com/blog/passwordsharing-work2

Efficient, easy to manage training fororganizations of any size
Introducing Kaspersky ASAP, Automated Security Awareness Platform, which sits at theheart of the Kaspersky Security Awareness training portfolio. The platform is an online
tool that builds strong, practical cyber-hygiene skills for employees throughout the year.
Launching and managing the platform doesn’t require special resources orarrangements, and it includes built-in help at every step of the learning journey towards
a safe corporate cyber-environment.

Meaningful content that you can’t ignore
One of the most important criteria when choosing an awareness program is efficiency,
and with ASAP, efficiency is built into the training content and management. The content
is based on the accumulated experience of 25+ years in cybersecurity expressed in
a competency model comprising over 350 practical and essential cybersecurity
skills that all employees should have.

Educate your employees about cybersecurity.
Change their attitude and behavior and protect your business and IT systems.

Efficient training
Consistent– Well thought-out, structured content– Interactive lessons, constant reinforcement, tests, simulated phishing attacks toensure skills are applied
The content and structure of the training material take into consideration the specifics
of human memory, and our ability to absorb and retain information.

Practical & engaging– Relevant to employees’ everyday working life
– Skills that can be put to immediate use
Examples from real-life situations which employees can personally relate to contributeto better learner engagement, helping information to be retained.

Positive– Puts a proactive spin on safe behavior– Explains ‘why’ and ‘how to’ instead of just the taboos
Too many rules and restrictions can cause discontent and disengagement, while
explanations and principles aligned with the way people think naturally contribute toadoption and behavioral change.

Easy management
Easy to manage– Fully automated learning management brings every employee up to the skills
level appropriate to their risk profile without any intervention from the platform
administrator– Synchronization with AD (Active Directory), SSO (Single Sign-On), Open API (theability to interact with third-party solutions), online onboarding during the first visit,a FAQ section and tips all make platform management convenient and efficient.

Easy to control“All-in-one” dashboard & actionable reports:– report on lesson progress– reports on tests and simulated phishing attacks

Easy to engage

The platform automatically sends out invitations and reminders, as well as reports tostudents and administrators.

3

ASAP management: simplicity throughfull automation
Start your program in 4 simple steps
12

3

4

Add users

Divide users by groups

Launch training

Automated training
management done by ASAP

Use AD synchronization
or upload .xlsx file or add
them manually

Divide users manually or
using rules based on thedesired target level

Divide users manually or using
rules based on the desired
target level, and set the startdate for each group

ASAP creates a schedule
for each group, forinvitations, reminders & othercommunications – everything
happens automaticallyA new and improved approach to training

Onboarding during first log-in,
recommendations, FAQ and demo
videos, explaining how platform works
from admin and user perspective –everything you need to start the learning
process is on the admin main page

Kaspersky ASAP is changing the way we deliver cybersecurity learning content. Now
you can choose whether to assign employees a basic Express course that will help
you quickly meet regulatory requirements for cybersecurity training, or refresh theirknowledge, or opt for the Main course broken down into complexity levels

Topics covered
Topics covered

Main course

Express course

EmailEmailPasswords & Accounts

Passwords & Accounts

Websites and the InternetWebsites and the Internet

Social media & Messengers

Mobile device security

PC Security

Social media

Mobile Devices

My computer

Protecting confidential data

Protecting confidential data

Personal data

DoxingGDPR

Cryptocurrency security

Industrial Cybersecurity

Information security when working
remotely

Bank card security & PCI DSSFederal law 152-FZ (for Russia)

Topics are divided into large blocks, covering numerous IT security concepts *.
#Passwords #Phishing #Corporate accounts #Dangerous messages #Bank cards#Ransomware #SocialEngineering #Dangerous Files #Working with browsers#Corporate ethics #Antivirus #Malicious software #Applications #Browser#Confidential information #Storing information #Sending information #Personal
data #Internet and the law #European legislation #Business #Dangerous Links#Fake websites #Ransomware sites #Backup #Mobile data #Encryption #Cloudservices #Industrial espionage #PCI DSS #Two-factor authentication #Digital
footprint #Torrents #Catfishing #Targeted attack #Hashing #Tokens #Pattern
locks #Mining #Parental control*For the latest list of topics and concepts, please checkout k-asap.com

4Each topic has several levels, detailing specific security skills. Levels are definedaccording to the degree of risk they help to eliminate – for example, Level 1 is normallyenough to protect against the simplest attacks as well as mass attacks. Higher levels
need to be studied to learn how to protect against the most sophisticated and targeted
attacks.

Example: Skills trained in “Websites and the Internet” topic
Beginner
To avoid mass(cheap and easy) attacks

Elementary
To avoid mass attacks
on a specific profile

Intermediate
To avoid well-preparedfocused attacks

Advanced*
To avoid targetedattacks

23 skills, including:

34 skills, including:

12 skills, including:

13 skills, including:– Recognize fake pop-ups– Enter data only on sites
with a valid SSL certificate– Check sharing links before
sending– Use different passwords
for different registrations– Use software only fromtrusted manufacturers for
torrents– Recognize sophisticatedfake links (including links
looking like your company
websites, links withredirects)– Pay attention to redirects– Distinguish genuine
download links from fakeones– Recognize fake sites by anumber of signs– Recognize executable files
found on the web– Download legal content
only from torrents– Avoid numeric links– Be able to determine theauthenticity of a browser
extension– Check sites using specialutilities– Recognize invalid network
link addresses by fakesubdomains– Clear browser cookies
regularly– Recognize if the browser ismining+ reinforcementof elementary skills+ reinforcementof the previous skills+ reinforcementof the previous skills– Avoid black SEO sites

ASAP Express course

A short version of the training in audio-video format. Each cybersecurity topic contains
several short lessons to help the user grasp basic cybersecurity skills.

• Interactive theory• Videos• Tests
Simulated phishing attacks aren’t included in the learning path, but can be assigned
separately by the administrator.

ASAP main course
The training is based on the specifics of human memory:• Multimodal content:◦ each unit includes: an interactive lesson, reinforcement, assessment (test andsimulated phishing attack, where applicable)◦ all training elements support the particular skill being taught in each unit, so thatskills are truly grasped and become part of the new, desired behavior• Interval learning:◦ training elements follow each other at certain intervals, which eliminates the simple
clicking of lessons and improves memory retention. Intervals are based on theEbbinghaus ‘Forgetting curve’ study◦ repetition builds safe habits and prevents forgetting

Ebbinghaus’ Forgetting Curve
First learned

Reviewed• Balanced, structured content relevant to real-life ensures efficiency:◦ packed with real-life examples that highlight the personal importance ofcybersecurity for employees◦ the platform focuses on teaching skills, not just providing knowledge, so practical
exercises and employee-related tasks are at the core of each module.

100%

90%
Memoryretention
(%)

80%

70%

760%

01234567

Elapsed time (days)

5Flexible learning path

Flexible learning
The scope of the training is completely flexible, while retaining the advantages ofsequential automated learning management. For each training group you can choose:• Main or Express course, or a combination of both;• Topics to train in the main course and/or the Express course which students in thegroup need to learn;• The target level you want students to achieve for each chosen topic in the maincourse.
The learning path will be built automatically by the platform for each group of learners
based on these settings.

Do it all from the dashboard• Everything you need to control and manage training – statistics, summaries of users’
activities and progress, training slots, group training, suggestions on how to improve
results – can be done from the dashboard. You can download reports in a single click
and configure the frequency of reports there too.

Freedom to perform• Employees can study whenever it’s convenient for them, and from any device, withASAP’s mobile-friendly design that makes learning convenient and comfortable.
• Users can access the training portal from personalized links provides in the training
invitation or via a single link for all users with Single Sign-On (SSO) technology if it’s
set-up by administrator.

Customization
Certificate
This Passwords and accounts: Beginner certificate confirms that{userName}completed the Cybersecurity Basics program, confirming theirability to create strong personal and corporate passwords, as wellas their knowledge of how to store them safely and what to do ifthey're hacked.

03/20/2023
Cybersecurity Basics
https://k-asap.eu

The administrator can easily change the program’s appearance:• replace the Kaspersky logo with your company logo in the admin panel, training portal
and platform emails;• customize certificates;• add personal content to any lesson.

Integration
You can use Open API to interact with third-party solutions – Open API works via HTTP
and offers a set of request/response methods.

ASAP integrates with Kaspersky KUMA & XDR platforms:– Admin can see an event in XDR and take the appropriate response, including assigning a training in ASAP
– Automatic enrichment of incident cards with information about the level of awareness of the attacked user

Localization
ASAP is available in 25 languages*. Localization in ASAP goes beyond just translation –text and visuals are not only translated into different languages, they’re also adjusted toreflect different cultures and local attitudes.

*

Current list of available languages is available onk-asap.com

6

Example of the editable simulated
phishing template and feedbackSimulated phishing campaigns
Phishing campaigns are offered in addition to the main training. They test employees’
practical skills in avoiding phishing attacks, and help training managers to quickly identify
gaps in users’ knowledge and encourage further study of troublesome topics. The
phishing campaigns are also an excellent tool for teaching employees how to recognize
potentially harmful signs, and putting their knowledge into practice.
The platform comes with ready-made email templates containing phishing examples
that can be sent to users in all available languages. The templates are regularly updated
and new ones added. You can also create custom emails based on predefinedtemplates.

Try a simulated phishing attack before you start training – check your employees’
resilience! It will help employees and management to see the benefits of training.
Employees can also demonstrate their understanding of a topic by not being fooled by asimulated phishing attack, and by reporting phishing mails via the ‘Report phishing’ tool.
The ‘Report phishing’ tool demonstrates the level of employees’ awareness, removes
email from the Inbox, and sends messages not only to platform admin, but also t IT/ITsecurity teams, to help organizations improve their phishing detection and responselevels.

7Kaspersky Security Awareness – a new approach to mastering
IT security skills
Key program differentiators

ASAP is a core product in Kaspersky’s Security Awareness portfolio.

One flexible training solution for all
Kaspersky Security Awareness has a longstanding international track record of success.
Used by businesses of every size to train over a million employees across more than
75 countries, it brings together over 25 years of Kaspersky’s cybersecurity expertisewith extensive experience in adult education.
Substantial cybersecurity expertise25+ years’ experience in cybersecurity
transformed into a cybersafety skillset thatlies at the heart of our products

The portfolio offers a range of engaging training options that increase thecybersecurity awareness of your employees at every level, empowering them to playtheir part in the overall cybersecurity of your organization.
Because sustainable changes in behavior take time, our approach involves building acontinuous learning cycle with multiple components. Game-based learning engages
senior management, turning them into advocates of cybersecurity initiatives andsupporters of building a culture of cybersafe behavior. Gamified assessment helps todefine gaps in employee knowledge and motivate them for further learning, while online
platforms and simulations equip them with the right skills, reinforced.
С-Level ExecutivesAs G
se am
ssmgement
Engatli ns k illse

op1sarng&in geoGeneralistITR e i n f o rc e mfc
de ybersec
fe nu ri t yseen

Pratneninac ti cyblceds P Se
lat cur
fo ityrmli zLeyg
ieci adrharLe

Spehrk s
wotive velInterac r C-le
fos
ive
cut
ExevelС-Leg
inin
trativeExecu

300+
cybersecurity
skills

Cybfor ersec
IT O uritynline

8Cu
hyg rrenien t ueaste
ma nesotAu wareAAll Employees

Ssim trate
ula gtiam eteic gamoneryb ntr c mese esssKa
Pro spete rskct yionetivac tionrte la
In imuSled ooifi nt Te

Our gamified training provides engagement
and motivation through edutainment, while
the learning platforms help to internalize thecybersecurity skillset to ensure that learnt
skills don’t get lost along the way.

All E
mployees

Training that changes employees’
behavior at every level of yourorganization

www.kaspersky.com

2023 AO KASPERSKY LAB. REGISTERED TRADEMARKS AND SERVICE MARKS ARE THE PROPERTY OF THEIR RESPECTIVE OWNERS.

Kaspersky ASAP free trial: k-asap.com
Enterprise Cybersecurity: www.kaspersky.com/enterprise
Kaspersky Security Awareness: www.kaspersky.com/awareness
IT Security News: business.kaspersky.com