Skip to content

Onboarding

Every joiner baselined in their first week

New starters are the highest-risk cohort in any organisation and the easiest to miss, because adding them is always somebody's manual step. Provisioning from your identity provider removes the step entirely.

Day 1
in scope automatically
Week 1
baseline simulation
90 days
elevated-risk window
ELEVATED RISKDay 0Account createdSCIMDay 3Baseline sentTier 1Day 30First lessonOn failureDay 90Cohort endsRisk normalisesNobody adds them. Nobody is missed for starting mid-quarter.

Automation

The directory is the enrolment trigger

When SCIM creates the account, SafeLoop creates the person, places them in the right department audience and schedules their baseline. Nobody has to remember, and nobody is missed because they started mid-quarter.

  • Enrolled the moment the account exists
  • Department and manager scoping inherited from the directory
  • Baseline scheduled, not queued behind a campaign cycle
BehavioralRisk ScoreSimulate — Multi-channel lure1SimulateDetect — Click, submit, report2DetectTrain — Auto-enrol on fail3TrainMeasure — Score + benchmark4Measure
  1. 1. Simulate Multi-channel lure
  2. 2. Detect Click, submit, report
  3. 3. Train Auto-enrol on fail
  4. 4. Measure Score + benchmark

Measurement

Tenure risk is its own factor

First-90-day risk is graded separately, so a department that hires heavily is not permanently penalised for it — and you can see whether your onboarding actually reduces the gap between a new starter and a two-year employee.

  • First-90-day cohort tracked separately
  • Time-to-first-pass per intake
  • Onboarding effectiveness per department
0%10%20%30%40%Baseline: 33.2% phish-prone33.2%Baseline90 days: 20.1% phish-prone20.1%90 days12 months: 4.2% phish-prone4.2%12 months−87%
Phish-prone rate over 12 months of continuous simulation and training. Source: KnowBe4 2026 Phishing by Industry benchmark (33.2% → 20.1% → 4.2%).

Questions

Asked on every first call

The ones that decide whether a first call turns into a second one.

2 questions

What if we hire in large seasonal intakes?

Intakes are treated as cohorts, so you can compare October's starters against June's and see whether a change to induction actually moved anything. Retail and hospitality customers use this to justify keeping security in the induction agenda.

Do new starters get tested in their first week?

Yes, and deliberately at tier one. The point of a week-one baseline is a reference number, not a trap — the difficulty ramps once there is something to compare against.

See the joiner flow end to end

We create a test user in your sandbox directory and watch the baseline schedule itself.

See your human risk in 20 minutes

Book a demo and we’ll run a sample campaign against a test group.