Coaching & interventions
Coaching turns a risky moment into a teachable one. Interventions are rule-based actions that fire automatically when someone behaves riskily — a caught simulation, an overdue course, or an incoming security signal — and reach the person both in the app and by email.
What an intervention does
Each intervention rule has a trigger and an action:
- Nudge — a short coaching message shown on the user's dashboard NudgeCenter card, with an email twin sent to the same person. The email is best-effort: if delivery fails, the in-app nudge still stands.
- Assign training — enrols the user in a specific training module (the remedial loop), in addition to the nudge.
Built-in triggers
Your organisation ships with a set of seeded rules you can keep, edit, or reset to defaults:
| Trigger | Typical action |
|---|---|
| Caught by a simulation (clicked / submitted credentials) | Nudge + auto-assign remedial training |
| Training overdue | Nudge reminding the user to finish (see Automation) |
| High/critical external security signal | Nudge from an incoming SecurityCoach event |
Manage rules
- Go to Interventions / Coaching in the main navigation.
- Review the active rules. Each shows its trigger, action, and (for training rules) the module it assigns.
- Edit a rule's message or target module, toggle it on/off, or restore defaults to return to the seeded set.
How coaching connects to risk — nudges and remedial training feed the reporting and training components of the risk score. Coaching where it matters is how you move the number down.
The phished-to-trained loop
When a simulation catches someone, the caught event can auto-assign remedial training and send a coaching nudge in the same step — no manual follow-up. The user gets the in-app card, the email, and (if the module is assigned) a link to complete their course, which they can take even without logging in via a signed training link.
Next: Policies & attestation.