Questions from employees

These answers describe how HumanRisk Shield works. How your organization uses it is up to your organization, so for anything about your own program, your HR or IT team has the final word.

Why did I get a practice phishing email?

Your organization runs practice phishing to help everyone get used to spotting and reporting suspicious email. Practice emails look like real ones on purpose. See Practice phishing at work.

Will I get in trouble if I click one?

HRS is built to teach, not to punish. If you click, you see a short page explaining what gave the email away. Your organization decides how it follows up, but the platform gives managers a coaching guide, not a disciplinary one, and its terms say a risk score must not be the only basis for an employment decision.

I typed my password into a practice page. Is it stored?

No. Practice pages throw away whatever is typed into them. HRS records only that the form was submitted. If you typed a real password, changing it anyway is a good habit.

How can I tell a practice email from a real one?

Often you can't, and that's the point. Treat every suspicious email the same way: don't click, and report it. If it was practice, you'll be told. If it was real, you've just helped your security team. Spot a phishing email covers the signs to look for.

How do I report an email?

In Outlook, use the Report Phishing button. See Report a suspicious email. If your organization reports another way, follow its instructions.

Who can see my results?

You, and your organization's admins. Your manager may be brought in if you repeatedly fall for practice emails and your organization has set up reporting lines. Learning points can appear on your organization's leaderboard; your risk score does not. More detail is in Practice phishing at work.

What is my Personal risk score?

It's a number from 0 to 100 on your dashboard, built from your training, practice phishing results, policy acknowledgements and similar signals. Lower is safer. Reporting practice emails and finishing training bring it down; clicking and overdue training push it up. It updates overnight, so a change today shows tomorrow.

Why have I been assigned training?

Your organization's admins assign it, sometimes to everyone and sometimes to a group, for example after a practice phishing campaign. The due date is on My training. See Take your assigned training.

Can I stop the reminder emails?

Training reminders and assignment emails come from your organization's settings, so the quickest way to stop them is to finish the training. In HRS Learn you can choose how in-app notifications reach you under notification preferences, but that doesn't switch off the training emails. Security notifications can't be turned off.

Can I retake a knowledge check I already passed?

No. Once you've passed, the knowledge check is closed. You can start the module over to revisit the lessons, and you keep your certificate and best score.

Where is my certificate?

Open My training and select View certificates, then Print / save PDF. Certificates are issued when you pass the module.

Is training available in my language?

The HRS Learn interface is in English. Some content, including some practice phishing emails, is available in other languages, depending on what your organization chooses.

Do videos have captions?

Many lessons include a transcript, which you'll find under Transcript in the lesson and on the module's Resources tab. If you need an accessible alternative for a particular lesson, ask your admin.

Can I use my phone?

You can report suspicious email from the Outlook mobile app, and the page you see after clicking a practice email is designed for phones.

What is Ask HRS AI?

A help button on every page of HRS Learn. For employees it acts as a learning coach: it can suggest what to do next and answer questions about your own training. It only sees your own learning, never your colleagues' data.

How do I get my data deleted?

Ask your organization's admin. Your organization controls your data in HRS and can arrange for your record to be anonymized.

Who do I contact for help?

For sign-in problems, training questions or anything about your program, contact your own admin or IT team. HumanRisk Shield support works with your admins and can't change your account directly.