Case Study: University of Oklahoma achieves campus-wide phishing-risk reduction and security behavior change with KnowBe4

Achieving Real Security Behavior Change at the University of Oklahoma

The University of Oklahoma faced the challenge of building a positive cybersecurity culture for nearly 50,000 people across three campuses, with diverse audiences of faculty, staff and students and varying security skills. Randy Moore leads OU’s security awareness program and selected KnowBe4’s security awareness training and simulated phishing platform (using Smart Groups, ModStore content, PSTs and the Phish Alert Button) to scale education and measurement across the university.

KnowBe4’s phased deployment combined baseline Phishing Security Tests, just‑in‑time training, role‑based ModStore content, reporting APIs and the PhishER SOAR platform to automate incident sorting and user feedback. The results: OU’s main campus Phish‑prone Percentage fell from a 13.9% baseline to about 4.3%, and PhishER helped remove nearly 150,000 malicious emails in the first six months, saving analyst time and improving leadership visibility into risk.

University of Oklahoma

Randy Moore

IT Veteran