Security awareness training for staff, plus fake phishing emails that test whether the lessons stuck.
It delivers web-based awareness lessons and simulated phishing, then tracks completion and results, per Fortinet’s data sheet.
Inmates can try to manipulate staff into breaking technology rules, or into sharing access. Awareness training covers these tactics, along with email scams.
- Teaches staff to spot manipulation and phishing.
- Fits short sessions around shifts.
- Gives records of completion.
A phishing attack on a Michigan jail
In 2017, a man used phishing emails and phone calls on Washtenaw County employees to get into the county network, then altered a jail record to try to win an inmate’s early release. Staff caught it, and the county’s losses were at least $235,488.
Source: U.S. Department of Justice
- Phishing simulations measure actual behavior.
- Completion tracking produces records for audits.
- Targeted retraining for those who need it.
| Control | Priority | How this helps |
|---|---|---|
| AT-2Literacy Training and Awareness | P2* | Directly supports security awareness training, including insider threat and social engineering topics. |
| AT-3Role-Based Training | P2* | Can complement role-based training, though it may need CJIS-specific content. |
CJIS requires specific topics, and your state may mandate a particular training platform such as CJIS Online. Confirm this can count, instead of assuming it replaces the required course.
Based on CJIS Security Policy v6.1. This product can support these controls but can’t satisfy them alone. How to read this table