Subject: Security Awareness Training Rollout

Dear Colleague,

We’re excited to announce the rollout of BullPhish ID, a new security awareness training and phishing simulation platform designed to help strengthen our organization’s defense against cyber threats.

As you may know, most data breaches occur due to human error—for example, clicking on a phishing email or unknowingly sharing sensitive information. BullPhish ID helps prevent such risks by providing interactive security awareness training and simulated phishing exercises that prepare you to recognize and avoid real-world threats.

What to expect as a BullPhish ID end user

This guide explains the types of emails, notifications, and actions you may experience as part of your organization’s BullPhish ID security awareness and phishing simulation program. The purpose of this program is to help you recognize and respond safely to real‑world cyber threats.

Phishing simulation emails

What they are

BullPhish ID phishing simulation emails are safe, simulated messages designed to look like real‑world phishing attempts. The emails may appear to come from common or trusted sources such as delivery services, IT support, shared document platforms, password reset requests, or internal communications.

What to expect

These emails may look urgent, unexpected, or enticing. They may prompt you to click a link, download an attachment, or provide information. These emails are not real threats and are part of a security awareness test.

What you should do

  • Review the email carefully, just as you would with any suspicious message.
  • Report the phishing email using your organization’s recommended method (for example, a phishing report button or forwarding the email to IT/security).
  • Avoid clicking links or opening attachments unless you are confident the email is legitimate.

Why this matters

Phishing simulations help you practice identifying suspicious messages so you are better prepared to spot and avoid real phishing attacks.

Training campaigns (security awareness courses)

What they are

Training campaigns assign short security awareness courses that you must complete through your organization’s BullPhish ID training portal.

What to expect

You may receive an email notifying you that a training course has been assigned. The email includes a link to the training portal. Courses typically include short videos, interactive content, and a quiz.

What you should do

  • Click the link in the email to access the training portal.
  • Complete the course and pass the required assessment by the due date.

Why this matters

These courses teach you how to recognize threats such as phishing, social engineering, and malicious attachments, helping to protect both you and your organization.

Training portal access

What it is

The training portal is a dedicated website where you complete assigned security awareness courses.

What to expect

The training portal may be custom‑branded with your organization’s name or logo. It includes a dashboard showing your assigned courses and completion status. You can access the training portal from any modern web browser.

What you should do

  • Log in using the link provided in your training notification email.
  • Return to the portal anytime to check your progress or complete pending courses.

Training reminder emails

What they are

If you have not yet completed an assigned training course, you may receive reminder emails.

What to expect

Reminder emails are sent automatically and continue to be sent until the training is completed or the training campaign ends.

What you should do

  • Use the link in the reminder email to return to the training portal.
  • Complete the course as soon as possible to stop further reminders.

Automatic training after a failed phishing test

What happens

If you interact with a phishing simulation email (for example, by clicking a link or entering information), you may be automatically enrolled in a follow‑up training course.

What to expect

You will receive an email informing you that a remedial training course has been assigned.

Important to know

Being assigned a remedial training course is not a punishment. Its purpose is to support education and continuous improvement.

Your role in strengthening security

Your participation in BullPhish ID training is critical. Every completed course and correctly identified phishing attempt helps:

  • Reduce the risk of cyber incidents.
  • Keep our data and systems secure.
  • Improve the organization’s readiness and compliance posture.

Thank you for actively contributing to a safer digital workplace. Together, we can prevent cyberattacks before they happen.

If you have any questions or encounter issues accessing your training, please contact [IT/Security Team Contact Email].

 

Revision Date

Expanded section: What to expect as a BullPhish ID end user.

8/3/26