Personal Profile, Company Profile & Platform Branding¶
1. Executive Summary & Value Proposition¶
A successful human risk management platform must feel like an organic, trusted extension of your corporate brand rather than an unfamiliar third-party tool. SimuPhish provides comprehensive Personal Profile, Company Profile & Platform Branding controls (Main Navigation > Settings > Personal Information and Settings > White Labeling). Administrators can customize user credentials, contact details, multi-factor authentication, and language preferences, while tailoring enterprise white-label elements—such as corporate logos, favicons, custom themes, and official email footers—to build employee trust and maximize engagement.
2. The Threat Landscape & The Real-World Problem Solved¶
- Employee Skepticism & Phishing Confusion: If security training emails look generic or display third-party vendor domains, vigilant employees may suspect the training invites themselves are phishing attacks.
- Inconsistent Global Brand Experience: Multi-brand enterprises need training interfaces that reflect their corporate visual identity across global offices.
- Account Security Risks: Security administrators managing enterprise platforms require strict multi-factor authentication (MFA) and granular account governance to prevent administrative takeover.
3. How It Works (The User Journey)¶
graph TD
A[Settings Navigation] --> B[Personal Information Tab]
A --> C[White Labeling Tab]
B --> B1[Profile Details: Name, Email, Phone, Company]
B --> B2[Security: Password Management & MFA Authenticator]
B --> B3[Language: English, Arabic, French, German, Turkish]
C --> C1[Corporate Visuals: High-Res Logo, Favicon, Brand Color]
C --> C2[Email Footer: Compliance Disclaimers & Contact Info]
C --> C3[Subdomain Mapping: Custom Learner & Admin Domains]
The Administrator Experience¶
- Navigating to Settings: Open
Main Navigation > Settingsand select either the Personal or White Labeling tab. - Personal Information Controls (
Settings > Personal): - Profile Information: Update Administrator First Name, Last Name, Official Email Address, and Phone Number.
- Company Name & License Overview: Displays your corporate tenant identifier, license tier (Standard, TPRM, Blue Collar), active seats, and expiration date.
- Password Management: Secure password update workflow requiring current password verification, length standards, and complexity rules.
- Multi-Factor Authentication (MFA): Enable TOTP-based two-factor authentication. Scan the displayed QR code with any standard authenticator app (Google Authenticator, Microsoft Authenticator) and verify with a 6-digit OTP code.
- Language Preferences: Select default administrative language (English, Arabic with full RTL support, French, German, Turkish).
- White-Labeling & Corporate Branding (
Settings > White Labeling): - Corporate Logo & Favicon: Upload high-resolution corporate logos (PNG, SVG, JPG) displayed on login screens, learner portals, and certificates.
- Brand Color Palette: Define primary and secondary brand colors using HEX color pickers, ensuring the learner interface matches corporate intranet styling.
- Email Footer Configuration: Add standardized corporate disclaimers, contact details for the IT security team, and enterprise compliance statements to all simulated emails and training notifications.
- WhatsApp Messaging Branding: Configure display names and corporate avatars for simulated mobile messaging drills.
4. Key Business Benefits & Measurable ROI¶
- Maximize Training Participation: Employees engage more readily with training portals that display familiar corporate logos and colors.
- Strengthen Administrator Account Security: Mandatory MFA protects administrative controls against credential compromise.
- Global Workforce Localization: Native multi-language support and right-to-left (RTL) Arabic formatting ensure seamless global adoption.
- Professional Corporate Presentation: Provide a cohesive, enterprise-grade look and feel across all employee security touchpoints.
5. Real-World Attack Scenario & Case Study¶
Scenario: The Confusing Vendor Email¶
- The Situation: An insurance enterprise launched security training using an unbranded third-party portal. Over 600 employees called the IT helpdesk reporting the training notification as a phishing scam because the email featured unfamiliar vendor branding.
- SimuPhish Action: The team accessed
Settings > White Labeling, uploaded the company's official corporate logo, matched the primary navy-blue brand color, and updated the email footer with the internal security desk extension. - Outcome: Employee helpdesk calls dropped to zero, and learner onboarding completion rates surged to 96% within the first 48 hours.