{"id":"FR2013059515","name":"Cofense PhishMe","provider":"Cofense","providerSlug":"cofense","status":"FedRAMP Authorized","impact":"Moderate","authType":"Agency","authDate":"2021-02-12","serviceModel":["SaaS"],"deployment":"Government Community Cloud","businessFunctions":["Cybersecurity & Risk Management","Education & Training"],"assessor":"Coalfire Systems, Inc.","assessorId":"138514","smallBusiness":false,"website":"https://cofense.com/solutions/industry/federal-government/","description":"Cofense PhishMe enables organizations to improve employee resiliency to phishing attacks through real-life simulated phishing scenarios. Thousands of the world's largest organizations in both public and private sector rely on PhishMe to condition employees to recognize and report phishing attacks. \n\nPhishMe enables trained awareness and compliance personnel to run simulated attacks using email templates that look like actual phishing attacks and includes on-the-spot educational content that displays when recipients click on one of the simulated phishing emails. For example, a scenario email might alert recipients that their (e.g. banking) credentials were compromised and ask the recipients to click a link in the email to reset their password. If a recipient does click the link, PhishMe displays educational content to help that individual recognize the characteristics of a phishing email. Through these safe examples, PhishMe customers can help their employees develop an awareness of the risks that real phishing emails pose and reduce their susceptibility of engaging with such emails in the future. \n\nTo maximize the effectiveness of simulation campaigns and reduce the burden on awareness teams, Cofense PhishMe provides a combination of unique capabilities:\n\n- Content is based on real phishing attacks gleaned from real threat intelligence. That means that the scenarios you run are as realistic as possible, ensuring your organization is conditioned to the latest threats.\n\n- Responsive Delivery allows simulation operators to deliver phishing simulations while the user is active in their inbox, which drives higher scenario engagement. \n\n- Predefined playbooks with scenario recommendations based on user behavior and best practices. \n\n- PhishMe helps organizations transform their employees into the last line of active defense against phishing attacks - the leading cause of data breaches - through education, ongoing simulations, and an easy to use reporting tool, Cofense Reporter, so organizations can swiftly detect, respond to and thwart phishing attacks in their tracks.","logo":"https://www.fedramp.gov/assets/img/logos/CSP_logos/Cofense%20Logo2.png","inMarketplace":true,"agencies":["22-022","22-005","22-002-04","22-027-05","22-032","22-019","22-028","22-026"],"reuseCount":7,"leverages":["F1603047866","F1512167750","FR1823447014","FR1821856903"],"leveragedBy":[],"timeline":[{"date":"2020-03-16","to":"Agency Authorization In Process","certType":"Rev5"},{"date":"2020-10-02","to":"FedRAMP In Process","certType":"Rev5"},{"date":"2021-02-12","to":"FedRAMP Certified","certType":"Rev5"}],"cr26":{"type":"Rev5","ocrOverdue":false,"valid":true,"findings":[{"level":"warning","message":"no UEI number; include it if you have one","rule":"CDS-CSO-PUB"},{"level":"warning","message":"no business category listed","rule":"CDS-CSO-PUB"},{"level":"warning","message":"no trust center link; CR26 requires one with access instructions","rule":"CDS-CSO-UTC"},{"level":"warning","message":"no link to secure configuration guidance","rule":"SCG-CSO-RSC"},{"level":"warning","message":"no next Ongoing Certification Report date","rule":"CDS-CSO-PUB"},{"level":"warning","message":"no service list; CR26 requires the services in scope","rule":"CDS-CSO-SVC"},{"level":"warning","message":"no documentation overview (repositories) listed","rule":"CDS-CSO-PUB"}],"assessor":"Coalfire Systems, Inc."},"sponsor":"22-005","trustCenterCheck":null}