W.E. O’Neil is a prime target for cyber security attacks. We’re hit with ~900 phishing attempts every 24 hours. YOUR awareness and quick action will help keep us safe! #EmploeeOwnership 

 

As part of our ongoing commitment to cybersecurity, we’re transitioning from KnowBe4 to Microsoft’s Attack Simulation Training platform for phishing simulations and security awareness training. 

 

• When? Sept 14, 2025 

• Why? To enhance phishing simulations and align with the Microsoft 365 environment.  

• What to expect: Periodic simulated phishing emails 

• What will change? Do NOT use the “Phish Alert button.” Use Microsoft’s built-in reporting tools – screenshots below. 

• If you fall for a simulation:  Complete short training modules within 5 business days 

 

 

This change will help us better align with our Microsoft 365 environment, streamline training, and provide more intelligent, real-world phishing simulations.  

 

 

What to Expect 

Starting Sept 14, you may receive periodic simulated phishing emails as part of our training program. These emails are safe and designed to help you recognize and report phishing attempts. 

 

  

 

Reporting Phishing – New Process 

Do not use the “Phish Alert” button anymore: 

 

Use Outlook’s built-in reporting tools. In your Inbox, select the suspicious email, then either: 

1. Click “Report” (small red shield) in the toolbar, and choose “Report phishing” 

-OR- 

2. Right-click the email and select Report > “Report Phishing” 

 

This helps Microsoft and our security team block similar threats for others. 

  

If You Fall for a Simulation 

No worries! You’ll be automatically enrolled in a short, targeted training module to help you improve your phishing detection skills.  

  

Each module is short (~5–10 minutes), interactive, and available in multiple languages. 

  

Training: When & How 

• Complete within 5 business days to stay compliant. 

• Training is assigned automatically after a simulation failure 

• You’ll receive an email with a link to the training (see “Landing Page” attachment) 

• You can also access your training assignments anytime via: 

• Microsoft Defender Portal: https://security.microsoft.com/trainingassignments  

  

Best Practices for the Training 

• Use a desktop or laptop for the best experience. 

• If you’re interrupted, you can resume where you left off. 

• Training progress and completion rates are monitored by WEO’s IT Team 

  

Why It Matters 

Completing trainings helps: 

• Reduce your risk of falling for real phishing attacks 

• Protect company data and systems 

• Improve our overall security posture 

 

You will also be asked to complete training as part of scheduled all-staff simulations. 

 

 

Why the change in software? 

Microsoft’s “Attack Simulation Training” offers: 

• Realistic phishing simulations based on current threats 

• Automated training assignments tailored to user behavior 

• Integrated reporting and insights within Microsoft 365 

• Seamless user experience via Outlook and Microsoft Teams 

  

Questions? 

Reach out to the [email protected]