Learn the common reasons as to why your clients might initially object to or delay launching a human risk management solution/user training, and learn how to overcome them.
Top 5 objections
❌ "Senior management won't buy into the idea"
Senior management often fail to understand how at-risk their business is to human error and user-targeted attacks.
❌ "We don't have the budget for this"
Security awareness training is often seen as a cost to business, rather than an essential security process. There's also a misconception that training solutions are expensive.
❌ "We don't have time to create and manage training"
Some clients might not know where to start with launching user training, let alone finding the time to manage training and ensure users are taking courses.
❌ "Our business is too small to be at risk"
SMB breaches don't tend to make headlines, so smaller companies are unaware that they're a huge target.
❌ "We already do security awareness sessions each quarter"
A lot of clients don't understand the need for regular and measurable training, and instead rely on ad-hoc sessions, sporadic emails tips or workplace posters on a cluttered board.
How to overcome them
✅ "Demonstrate your organisation's human cyber risk to your managers with a free Human Risk Report"
Encouraging your clients to accept a free Human Risk Report assessment will provide them with a powerful one-page overview that clearly articulates their organisation's risk. Learn more about HRR here.
✅ "The solution is low-cost and there's and you'll be put on a flexible monthly subscription, meaning you can cancel anytime"
usecure's flexible monthly billing eliminates the fear, uncertainty and doubts of long-term commitments. Plus, you can enable a free 14-day trial for clients to demonstrate the true value.
✅ "The platform is heavily automated, admin-lite and essentially runs itself"
We can't stress this point enough - usecure is incredibly admin-lite! Enabling features like AutoEnrol and AutoPhish means that you and 'set it and forget it'. Training, phishing, policy approvals reporting - everything is designed to save time.
✅ "SMBs are often seen as an easier target due to less advanced security, plus most attacks are randomised"
Attackers don't care what data your clients' have, they just care that your clients are willing to pay up to regain access. Running your clients through risks like their dark web exposures is a strong message.
✅ "Sporadic training doesn't work - human risk needs to be continuously reduced and monitored to truly prevent user-related breaches"
It's so important to a) train user regularly b) measure the impact of training and b) test users on a practical level (e.g. phishing simulations). Broadcasting training material alone won't significantly reduce human risk.
![[Beta] Partner Enablement Hub](https://downloads.intercomcdn.com/i/o/crkf5eqb/829547/94c790eedafcfdf76659038ceccd/042ad5a0206f52800d2944e19966b651.png)