Skip to content

Automation Rules: Trigger-Based Remedial Training & Event Workflows

Platform Feature: Automation Rules (Triggers)
UI Location: Main Navigation > Resilience Academy > Automation Rules (/automation-rules)
Capabilities: Event-Driven Trigger Workflows, Automated Remedial Course Enrollment, Risk Tier Escalations
Supported Triggers: Simulation Link Click, Credential Entry, Repeated Failure, Dark Web Breach Discovery

1. Executive Summary & Value Proposition

Manual remediation cannot scale. In an enterprise with 5,000 employees, manually cross-referencing which users failed a phishing test, finding an appropriate remedial training course, and emailing them an assignment is impossible for security teams to maintain.

Automation Rules (/automation-rules) delivers zero-touch, closed-loop behavioral remediation. By establishing event-driven "If This, Then That" security policies, SimuPhish automatically triggers educational interventions the instant an employee exhibits risky behavior.

2. Core Trigger Workflows & Use Cases

1. The "Immediate Remedial Assignment" Rule

  • Trigger: Employee clicks a link or submits credentials in a PhishStrike or QuishFire drill.
  • Automated Action: Immediately enroll the employee in a mandatory 3-minute remedial micro-course (e.g., "Spotting Modern Phishing Lures") with a 7-day completion window.

2. The "Repeat Offender Escalation" Rule

  • Trigger: Employee fails 2 or more attack simulations within any rolling 60-day period.
  • Automated Action: Automatically transition the user into the Dynamic Smart Group: High Risk, notify their assigned Escalation Manager, and assign an advanced social engineering defense curriculum.

3. The "Breach Exposure Enrollment" Rule

  • Trigger: An employee's corporate credentials are discovered in a newly surfaced dark web stealer log dump by Exposure Radar.
  • Automated Action: Trigger an automated prompt requiring the employee to review credential hygiene and sign off on corporate password policy.
graph TD
    TriggerEvent{"Event Triggered<br/>(Simulation Click / Credential Entry / Dark Web Exposure)"} --> Evaluate{"Evaluate Automation Rules"}

    Evaluate -->|Rule 1: Auto-Enrollment| Enroll["Automatically Enroll in Remedial Course"]
    Evaluate -->|Rule 2: Smart Group Shift| SmartGroup["Move to 'Repeat Clickers' Smart Group"]
    Evaluate -->|Rule 3: Manager Alert| Manager["Dispatch Escalation Alert to Supervisor"]

    Enroll --> Compliance["Logged in Compliance Trail (/compliance-trail)"]
    SmartGroup --> Compliance
    Manager --> Compliance

3. Business Value & Security ROI

  • Zero Administrative Overhead: Eliminates manual spreadsheet tracking of employee test failures.
  • Just-in-Time Behavioral Conditioning: Reinforces good habits when the mistake is fresh in the employee's mind.
  • Demonstrated Due Care for Auditors: Proves to regulators that test failures are systematically resolved through documented remediation.