KnowBe4 partner in Dubai
We measure security awareness against a real baseline, then aim the training at the people being attacked instead of putting everyone through the same annual module.

Our KnowBe4 partnership
iConnect is an award-winning KnowBe4 partner in Dubai and the UAE, named Best Partner of the Year for the UAE. We deliver security awareness programmes for organisations across the Emirates, covering baseline testing, campaign design, reporting and the follow-up that changes behaviour.
Awareness training only works when the programme is run properly. Sending everyone the same annual module produces a completion statistic. Targeting the people actually being phished, at a realistic difficulty, produces a measurable drop in click rate.
KnowBe4 products we deploy
The platform covers training, simulation, coaching and reported-mail response. What you need depends on whether the gap is awareness or the handling of reports.
How we deliver KnowBe4
We run an unannounced simulation before any training, which establishes the real click rate. Without a baseline there is nothing to measure improvement against.
- Simulation run unannounced, since a warned workforce produces a meaningless number
- Results broken down by department and role, where the variation shows
- The baseline recorded, so later improvement can be shown as a figure
Campaign frequency, difficulty progression and content are set around your workforce, including language mix and the roles most exposed to targeted attack.
- Difficulty progression planned so simulations stay realistic as click rates fall
- Language mix matched to your workforce, since an unread simulation teaches nothing
- Roles with financial authority given templates that reflect how they are actually attacked
The platform is configured with your groups, the Phish Alert Button is deployed to mail clients, and allow-listing is set so simulations reach inboxes.
- Groups synced from the directory so the population stays current without maintenance
- Phish Alert Button deployed to the mail clients your people actually use
- Allow-listing configured and tested, since a filtered simulation trains nobody
Simulations and training run on the agreed schedule, with difficulty increasing as click rates fall.
- Simulations spread across the month, so nobody is warned by the person next to them
- Training assigned automatically on a click, while the moment is still useful
- Difficulty raised as results improve, so the programme keeps measuring something real
Results are reported by group and role, with repeat clickers handled through targeted follow-up with their manager.
- Departmental results go to managers, who move a number faster than a security team can
- Repeat clickers handled individually, with their manager brought in
- Reporting rate tracked alongside click rate, since reporting is the behaviour you want
Campaign administration, content selection and reporting are handled by our team in Dubai, with the programme reviewed at agreed intervals.
- Campaigns scheduled ahead so the programme runs without anyone prompting it
- Templates refreshed as attacker technique moves, so simulations reflect what is landing now
- Progress measured against the original baseline, not only against last month
KnowBe4 and UAE regulatory requirements
UAE Information Assurance Standards
The IAS expects documented security awareness activity with evidence of delivery and completion. Campaign and training records provide it directly.
DESC ISR
Dubai government and semi-government bodies are examined on staff awareness programmes. Completion reporting and phishing metrics are produced on a schedule.
ADHICS
Abu Dhabi healthcare entities must demonstrate workforce training on information handling. Role-specific content and completion tracking address the requirement.
UAE PDPL
Staff handling personal data need documented training on their obligations. Compliance modules and completion evidence support that.
Why organisations choose iConnect
Scoped before it is quoted
We establish what you run and which obligations apply before recommending modules, so you are not paying for capability that duplicates something already in place.
Configured for your environment
Policy is built around the systems you run and the way your teams work, not left on vendor defaults.
Local delivery and support
Deployment and support come from our team in Dubai, working your hours and your change windows.
Documented for assessors
Configuration is mapped to the UAE framework you report against and documented, so an audit becomes a retrieval exercise instead of a reconstruction.
Integrated with your estate
The platform sits alongside your identity, endpoint and infrastructure systems. We handle those integrations as part of the deployment.
Reviewed on a schedule
Estates change and attacker technique moves. Policy is revisited at agreed intervals, not left as it was at go-live.
What our clients say
“Whenever an issue arises, iConnect is there immediately: quick, efficient and proactive in keeping everything running without disruptions. iConnect has become a crucial part of our operations.”
Head of IT Infrastructure and Network SecurityDragon OilFrequently asked questions
Yes. iConnect is an award-winning KnowBe4 partner in Dubai and the UAE, named Best Partner of the Year for the UAE. We handle licensing, implementation and ongoing programme management for organisations across the Emirates.
Security awareness training, phishing simulation, AIDA AI defence agents, real-time coaching, compliance training, PhishER Plus incident response, inbound and outbound email security, and agent risk management.
It can, if it is run as a trap. We design campaigns as training rather than testing, brief leadership beforehand, and handle repeat clickers through coaching rather than exposure. The point is a lower click rate, not a list of names.
Most organisations see a meaningful drop within the first few campaigns, with the larger gains coming from sustained programmes rather than a single burst of training. We report the trend rather than a single figure.
Yes. Campaign administration, content selection, scheduling, reporting and follow-up are handled by our team in Dubai. Most clients prefer this to running it internally alongside other work.
Documented awareness training appears in the UAE Information Assurance Standards, DESC ISR, ADHICS and PDPL. Completion records and campaign history provide the evidence directly.


