People Posture

This section includes:

About people posture

The People Posture page lets you see an overview of the email-based risk of each end-user that is protected by "Acronis Email Security". Based on the history of emails that they have received, "Acronis Email Security" awards each end-user a "risk score" - high, medium, or low. The risk score is determined based on the proportion of malicious emails that were received by the end-user, as well as the number of BEC events and credential phishing events associated with the user - during the previous quarter.

More about the risk score

The risk score is a relative score that compares the user to your organization. The risk score therefore lets you see how the risk of any user compares with the risk of other users in your organization.

The risk score is calculated daily and aggregated over time. This means the risk score changes slowly over a period of weeks or months, in line with general user and organizational behavior indicated by the observed events. Because the risk-score is calculated over time, changes in user activity will not be immediately reflected in the risk score.

It is not possible to customize the risk score calculation, or to affect how it is applied to users.

A user’s "VIP User" status does not affect their risk score.

About the "employee profile"

In the People Posture page, there is an Employee Profile link on the right of the row for each end-user. This link opens a pane that displays the "Employee Profile". The Employee Profile shows various risk-related details for the selected user.

Inside the "Employee Profile", the "Risk Analysis" section shows more information about the emails that were received by the user.

High risk malicious email count: The number of malicious emails that the user received during the previous quarter. Click the Details icon [] to open the Scans page - showing a list of these scans, using the filters below:
- Receiver address: Selected user
- Verdict: Malicious
- Date range: Last quarter
BEC email count:
Last ATO attack: Opens the Account Takeover page, and displays the most recent ATO case.

A bit more about people posture

The "People Posture" functionality is available to organizations that have an active Microsoft 365 Inline integration or an active Microsoft 365 API integration.

Do you have an active Microsoft 365 [Inline or API] integration?
Check that under Settings > Bundles and Channels > Enabled Channels, Email Service > Microsoft 365 is Active.
In the People Posture page, end-users won't have a Title, Location, or photo if this data is not received by "Acronis Email Security" from Microsoft.
The Title and Location columns are always displayed, even if the data is empty for all users.
It's not possible to export or download the People Posture list.

People posture - who's included?

The list of users in the People Posture page includes all protected users in the organization - and not only the billed users. Therefore, the number of people in the People Posture page [shown at the top of the People Posture page] will typically be greater than the "integration" number, that may be available on the Licenses page, and that may be used for billing. For details on which users are not included in the "integration" number [but are included in the People Posture list], see Integration - License source [Microsoft 365 / Microsoft Collaboration].