When HOPLONai Human Risk flags a breached account, a failed phishing simulation or overdue training, secure breached accounts first, retrain users who failed, then chase outstanding training.
HOPLONai gives growing businesses a complete security operation: the tools, and the agentic AI team that operates them.
This playbook covers training reminders, failed phishing simulations, breached credentials and the organisation's risk score.
What triggers a Human Risk action?
Trigger: Human Risk data in HOPLONai: training status, phishing simulation results, dark web and breach monitoring, and the risk score.
What happens when a user has not completed training?
Users who have completed training need no action. For everyone else, send reminders until the training is done:
Overdue by | Reminder | Who is told |
|---|---|---|
1 month | Gentle nudge | The user, by email or Slack |
2 months | Escalation | The user's manager and the security team |
4 months | Mandatory completion notice | The user, with possible access restrictions for non-compliance |
What should you do when a user fails a phishing simulation?
A user fails when they click the link or enter credentials. Users who pass need no action. For a failure:
Assign phishing awareness training straight away.
Send the user phishing best-practice material.
Schedule follow-up simulations to track improvement.
What should you do when an account appears in a data breach?
Indicators are credentials exposed on the dark web, or a work email address found in a known data breach. Respond as follows:
Notify the IT administrator immediately.
Reset the user's password.
Enforce MFA if it is not already on.
Send the user security best-practice material.
Enrol the user in training on account protection.
What if the organisation's risk score is not improving?
If the score is improving, no action is needed. If it is flat or rising, send reminders to users who have not completed their training.
Frequently asked questions
What is human risk management?
Human risk management measures and reduces the security risk created by people. It combines security awareness training, phishing simulation and breach monitoring, and tracks progress as a risk score.
How does HOPLONai score human risk?
HOPLONai scores each user on phishing simulation results, breach exposure and training. See the Human Risk module guide.
Why are phishing simulation emails not arriving?
Your email provider is most likely filtering them. Whitelist the simulation IPs in Google Workspace or Microsoft 365.
HOPLONai is agentic MDR — the security tools a growing business needs, and the AI team that runs them.
Build your security programme for free: get the HOPLONai ISO 27001 toolkit and 180+ policies, free forever, at hoplonai.com.