Human Risk Isn’t Going Away — But It Is Getting Smarter to Manage

How KnowBe4’s HRM+ platform rethinks security awareness training for law firms

Law firms have spent years treating security awareness training as a once-a-year checkbox: sit through a module, pass a quiz, move on. KnowBe4’s new HRM+ platform throws that model out. Instead of a single training product, HRM+ is a connected suite that continuously watches, coaches, and adapts to how your people actually behave — because in legal, your workforce (not your firewall) is still the biggest attack surface. As KnowBe4 shifts away from tiered “metal” packages toward a more unified, all-inclusive approach, now’s a good moment for firms to rethink what human risk management should really look like.

Here’s what’s inside the HRM+ suite:

• Security Awareness Training — the industry’s largest content library, localized in 35 languages, paired with AI-driven simulated phishing. Firms using it typically see phish-prone rates drop from over 30% to under 5% within a year.
• Cloud Email Security — AI-driven protection that continuously assesses risk and dynamically adjusts controls against advanced phishing and outbound data leaks, with fast API-based deployment.
• Anti-Phishing (PhishER Plus) — automatically triages reported emails, quarantines real threats, and turns them into training material, backed by an AI-validated, crowdsourced blocklist.
• Real-Time Coaching (SecurityCoach) — the moment risky behavior happens, the user gets an immediate nudge via Teams, Slack, Google Chat, or email, reinforcing good habits in the moment instead of a month later.
• Compliance Training (Compliance Plus) — 700+ continuously updated modules covering local regulatory requirements, tightly woven into the same platform as security training.
• AI Defense Agents (AIDA) — a suite of AI-native agents that automate and evolve your human risk strategy over time, with reporting built for both practice group leaders and the C-suite.

For law firms juggling client confidentiality obligations, cyber insurance requirements, and an increasingly AI-savvy threat landscape, the appeal of HRM+ isn’t any single feature — it’s that all six pieces talk to each other. Reported phishing attempts feed back into training. Risky behavior triggers coaching in real time. Compliance and security awareness live under one roof instead of two separate systems your IT and L&D teams have to stitch together manually.