How Glovo uses Culture^AI as a single
source of truth for
employee behaviour

AT A GLANCE

Glovo was in need of a comprehensive solution to enhance its cyber security efforts beyond mere compliance. They wanted to provide personalised, effective coaching based on employee risk profiles.

The CultureAI platform offered the solution, providing a unified system for phishing, targeted coaching, and reporting.

Now, Glovo's employees are starting to feel more engaged and confident about cyber security, and the security team is working towards having a real-time, single source of truth for employee behaviour.

CHALLENGE: TRAINING LACKED DEPTH

Gisela Petrini, Security GRC Manager at Glovo felt their previous training programme lacked depth.

“Training was mainly focused on onboarding and specific developer training, with no real-time data shaping the training programme.”

The Glovo security team felt this one-size-fits-all training approach was ineffective, as employees were repeating the same mistakes. There were also no measures in place to help people understand their own risk profiles or to receive targeted coaching. The reporting process was also manual and cumbersome, further hindering the effectiveness of the training programme.

Their former open-source phishing tool also had significant drawbacks. It could not intelligently deliver scenarios based on individual risk levels, relied on predictable scenarios, and lacked real-time data integration — making it challenging to provide timely, personalised interventions.

“We could see which employees had weak and reused passwords, and set up just-in-time education to advise them to update their password. We had no visibility of these risks before CultureAI.” (Gisela Petrini, Security GRC Manager at Glovo)

SOLUTION: A UNIFIED PLATFORM

CultureAI emerged as the solution to Glovo's challenges. The platform offered a unified system for phishing, targeted coaching, and reporting. The ability to see all metrics in a single platform was a game-changer.

"We liked the visibility that CultureAI provides into other risks, such as detecting PII data in channels like corporate file storage and instant messaging tools,” adds Gisela.

CultureAI's role in identifying vulnerabilities and enabling personalised coaching was valuable. The timesaving aspects, particularly in automating intelligent phishing simulations and just-in-time education, were key factors in Glovo's decision to adopt CultureAI.

"The continuous phishing feature was unlike anything we'd seen in other tools. In fact, all the features surpassed any other system we had compared it with," notes Gisela.

RESULTS: INCREASED ENGAGEMENT & TIMESAVING

Since partnering with CultureAI, Glovo has noted a significant increase in employee satisfaction and engagement with cyber security initiatives. The rewards and leaderboard features, in particular, have been standout elements.

“Recognising positive behaviours was important for us, and with CultureAI's rewards programme, we've seen a significant rise in participation. Everyone is engaging with the Security Centre,” adds Gisela.

This increased engagement has led to a 19% rise in employees reporting phishing emails over the past three months. Additionally, the implementation process of CultureAI was received positively. The support and responsiveness from CultureAI were praised, and the flexibility of being able to roll-out the solution gradually was valued. “We really feel like our feedback is taken on board,” notes Gisela.

A significant benefit for the Glovo security team was timesaving. "The automation frees up a lot of time for the team. Now, we can set up the phishing simulations and almost forget about them. The system selects from a library of scenarios, and we can easily add new templates."

“For us, CultureAI is becoming a single source of truth for employee behaviour. We now have access to real-time metrics and data. This enables us to identify weaknesses and address them with Targeted Coaching and Interventions.”