Proofpoint PSAT Driving Real Behavior Change

Security Awareness Training in the Spotlight: Gartner Market Guide for Security Awareness Computer Based Training – Part 1

Share with your network!

Gartner released a comprehensive review of security awareness training in their recent report, "Market Guide for Security Awareness Computer Based Training." In this guide, Gartner provides their key findings and recommendations that organizations should use to evaluate security awareness solutions.

After being named a Leader for six consecutive years in the Gartner Magic Quadrant for Security Awareness Computer Based Training, we are excited and believe that Proofpoint Security Awareness Training is still a leading solution in the market:

  • We fully support the overall conclusions for enterprise security awareness
  • We fully support the guidance provided for security and risk management leaders
  • We fully support the use cases that are defined for organizations

Coupled with our market leading people-centric security solutions, Proofpoint provides the ultimate solution for organizations to reduce the risk of breach and data loss by protecting the organization's number 1 threat vector; people.

In part one of this blog series, we look at how Proofpoint Security Awareness Training addresses all the key findings as defined by Gartner.

We believe we support all the Key Findings


#1: "Organizations must view security awareness as an ongoing component of their broader information security program, not simply a technology spend decision or an annual training expense."

Proofpoint's People-Centric Security recognizes that people are the most attacked and targeted resource of any organization. Proofpoint's Security Awareness Training leverages our market leading protection and intelligence solutions to amplify the impact of our security awareness solution.


#2: "While phishing testing remains the most used method to measure training effectiveness, it is not the only method an organization should use to measure security awareness effectiveness."

Proofpoint believes phishing is an important but not exclusive component of measuring user behavior change. User response rates are a positive indicator of an effective security program. Proofpoint's automated phish reporting and remediation capability CLEAR (Closed-Loop Email Automation & Response) highlight user recognition and response to phishing attacks while providing real-time feedback to users.


#3: "Successful security awareness programs must include both executive sponsorship and organization-wide involvement."

From assessments, global training modules, phish simulation and response automation, threat intelligence, and campaigns, our reports and content support the strategy and decision-making needs of executives and the organization's operating needs. These capabilities help executives and the organization understand how security awareness reduces risk and responds to the dynamic threat and privacy landscape.


#4: "Organizations without a full-time equivalent (FTE) employee dedicated to security awareness should look for security awareness platforms that can automate and orchestrate many elements of security awareness training."

Proofpoint Security Awareness Training provides automation and efficiency for the organization to operate with limited resources or scale to support unique global operations. For organizations that need to operate 'hands-free,' our managed services offload all security awareness overhead and allow organizations to implement programs without requiring in-house expertise and manhours.  


In part 2 of this blog series, we will evaluate how Proofpoint Security Awareness Training addresses all of the points raised in the Gartner Market Guide for Security Awareness Computer Based Training for recommendations and use cases.



The Gartner Market Guide for Security Awareness Computer Based Training provides organizations excellent guidance on the key issues for training users on safe computing. With effective security awareness programs, organizations can mitigate people-centric threats.

Proofpoint's Security Awareness Training is empowering thousands of organizations to counter the perpetually evolving tactics of malicious hackers. We help companies meet their security awareness goals, drive behavior change, support regulatory compliance, enhance employee knowledge, and reinforce behavioral expectations.   

Gartner, Market Guide for Security Awareness Computer-Based Training, Brian Reed, Richard Addiscott, Claude Mandy, 27 July 2020

Wombat Security Technologies as a Leader in Magic Quadrant for Security Awareness Computer-Based Training Vendors 2014

Wombat Security Technologies as a Leader in Magic Quadrant for Security Awareness Computer-Based Training 2015 – 2017

Proofpoint (Wombat Security) as a Leader in Magic Quadrant for Security Awareness Computer-Based Training 2018 

Proofpoint as a Leader in Magic Quadrant for Security Awareness Computer-Based Training 2019


Disclaimer: Gartner does not endorse any vendor, product, or service depicted in its research publications, and does not advise technology users to select only those vendors with the highest ratings or other designation. Gartner research publications consist of the opinions of Gartner's research organization and should not be construed as statements of fact. Gartner disclaims all warranties, expressed or implied, with respect to this research, including any warranties of merchantability or fitness for a particular purpose.