EnsureAware™
EnsureAware™ is Digital Boardwalk’s cybersecurity awareness training offering. Unlike traditional, in-person training programs, EnsureAware™ is an ongoing training program that allows participants to learn at their own pace and schedule, and delivers industry-leading efficacy. EnsureAware™ is designed to reduce the risk of users falling victim to phishing, social hacking, and other common Cyber-Attacks targeting users.
1. Application of Services, Inclusions, and Exclusions
The application of Services, Inclusions, and Exclusions as detailed below is determined by the level of service for Computers and Servers as well as the type of service delivered. See Application of Services for details.
2. Platform Limitations
Due to limitations and restrictions within the Apple macOS operating system, some Services may not be available to macOS devices. To indicate which platforms a Service is applicable to, the following identifying icons will appear next to the Service:
Service is available for Microsoft Windows devices.
Service is available for Apple macOS devices.
3. License
Service Provider delivers a cybersecurity awareness training license to Customer for licensed users. Due to the resale structure of the license between the licensing vendor, Service Provider, and Customer, Customer may not have access to all administrative functions of the licensed product. Unless otherwise listed as an included service under 4. Services (Included), all other Services, including technical support for administrative functions to which Customer does not have access, are excluded from this Agreement and excluded from the cost of this Agreement.
4. Services (Included)
Service Provider delivers Services to Customer for users listed as part of this Agreement. To be included as part of this Agreement, Computers and Servers must (i) have Service Provider’s remote monitoring and management (“RMM”) agent installed; (ii) Computers and Servers must be covered by an active support agreement (e.g. SupportPro™, SupportPlus™, etc.); and (iii) Customer must provide Service Provider a list of users Customer would like to participate in training. The following Services are listed as inclusions to this Agreement and are included in the cost of this Agreement:
4.1 Target Management
Upon request by Customer to Service Provider, Service Provider will add/remove users (the “Targets“) to/from phishing simulation and training campaigns. Target change management is limited to remote delivery during Service Provider’s operating hours and does not include field support or travel to Customer’s business location. See Service Availability for operating hours information.
4.2 Phishing Simulations
Service Provider will send a phishing simulation email to Targets once per month. Phishing simulation emails will be distributed to Targets randomly throughout the month. Targets who act on the call to action in the phishing simulation email will be redirected to a web page providing educational content about how to avoid falling victim to similar phishing attacks. The design and distribution of phishing simulation emails are solely provided by Service Provider and the platform manufacturer, and cannot be customized for Customer.
4.3 Training Campaign Administration
Service Provider will deliver two (2) cybersecurity awareness training semesters per year consisting of eight (8) weekly sessions each semester. Each week of the training semester, Targets will receive an email with a link to their assigned training. The training will consist of an online, self-guided course that educates Targets about cybersecurity threats, cybersecurity best practices, compliance requirements, and other training intended to help Targets avoid falling victim to Cyber-Attacks. The design and distribution of training are solely provided by Service Provider and the platform manufacturer, and cannot be customized for Customer.
4.4 Reporting
Upon request by Customer to Service Provider, Service Provider will deliver to Customer reports summarizing Target actions with phishing simulation emails as well as Target participation in training. Report request fulfillment is limited to remote delivery during Service Provider’s operating hours and does not include field support or travel to Customer’s business location. See Service Availability for operating hours information.
5. Out of Plan Services (Excluded)
Unless otherwise listed as an included service under 4. Services (Included), all other Services are excluded from this Agreement and excluded from the cost of this Agreement. Service Provider may deliver Out of Plan Services to Customer at rates set forth in Standard Labor Rates. The following is a list of common services excluded, without limitation, from this Agreement, regardless of any statement that the Service is included in the cost of the Agreement:
5.1 Supplemental Training
Service Provider delivers to Customer additional training on cybersecurity, compliance, or other technology concepts intended to meet regulatory compliance requirements and reduce the risk of users falling victim to phishing, social hacking, and other common Cyber-Attacks targeting users. Supplemental training is limited to remote delivery during Service Provider’s operating hours and does not include field support or travel to Customer’s business location. See Service Availability for operating hours information.
6. Third Party Products
Service Provider provides products or services from third parties in connection with the aforementioned Services. The following is a list of third parties used in connection with the Services and their respective terms and conditions to which Customer accepts and agrees:
Changelog
| Date | Previous Language | New Language |
|---|---|---|
|
06/22/2022 |
– |
[Original Publishing] |
|
08/25/2025 |
– |
Corrected the Standard Labor Rates hyperlink under 5. Out of Plan Services (Excluded) |