Case Study: Cebu Pacific reduces phishing risk to 6% and builds a strong cybersecurity culture with KnowBe4

Cebu Pacific Strengthens Cybersecurity Culture with KnowBe4

Cebu Pacific, the Philippines’ leading airline, faced high vulnerability from a largely untrained, dispersed workforce and had no dedicated cybersecurity team before 2017. To build a robust cybersecurity culture, the airline selected KnowBe4 and deployed its HRM+ security awareness platform to address phishing risk and deliver ongoing training across its global employee base.

KnowBe4’s program combined baseline and quarterly phishing tests, targeted “clicker” training, annual SAPA assessments, and tools like the Phish Alert Button and ModStore communications. The result: Cebu Pacific’s Phish-prone™ Percentage fell from 81% in 2017 to 6% by 2024, more than 6,000 users (including 2,000 from two subsidiaries) are trained and tested, and completion rates reached 96% for SAPA and 97% for awareness training, demonstrating a measurable cultural shift driven by KnowBe4.

Cebu Pacific

Bernadette N. Uycoque

Manager Security Operations