Case study
Access Community Health Network Reduces Phishing Risk by Over 50% with BrainStorm Threat Defense
Challenge
We talked with Mike Baran, CIO at Access Community Health Network about his success and challenges dealing with security threats in such a highly regulated industry and at such a volatile time in technology’s evolution.
As a healthcare organization operating under constant audit pressure, ACCESS needed to reduce human-based security risk and prove it with data. While heavily invested in Microsoft security tools, they lacked a consistent and effective way to train users, measure behavior change, and identify repeat offenders.
Previous training solutions were overly technical and failed to engage non-technical staff, leaving ACCESS with high phishing failure rates and limited visibility into where risk persisted.
Our previous security training solution provider was too dry and too techy for the average user. The material wasn’t consistent in quality.”
Access Community Health Network
Solution
Run consistent password-phishing and malware simulations
Track repeat offenders over time
Identify risk by role and title
Present clear, high-level metrics tied to real user behavior
Looking at failure rates and the types of messages people fall for tells us exactly where to focus our training next.”
Access Community Health Network
Results
Measured outcomes include:
Click rates reduced from 44% to 2%
Open rates reduced from 53% to 19%
50%+ reduction in phishing failures
Clear visibility into high-risk roles, enabling targeted training
Threat Defense data also supported ACCESS during audits and compliance reviews by demonstrating measurable reductions in user risk.
It was nice to be able to say this tool helped us lower failure rates.
Access Community Health Network
Business impact
By combining training, simulations, and reporting into a single platform, ACCESS strengthened its security posture while maximizing its Microsoft investment. Leadership gained confidence through simple, outcome-driven reporting that translated security performance into business terms.
My favorite way to present business value is the number of people who fell for a fake scam."
Access Community Health Network
Solution and offer
ACCESS’s story is one many security teams recognize: people are still the easiest way for threats to get in (the human element is still involved in nearly 70% of breaches*), and leaders want proof that things are actually improving. Threat Defense is built for that reality.
Threat Defense combines realistic phishing and malware simulations, role-relevant training, and built-in reporting into a single solution. Security teams can run ongoing campaigns, track repeat offenders, and quickly see where risk is concentrated across the organization. The result is a program that’s easy to manage, easy to explain to leadership, and focused on changing behavior, not just checking a box.
Ready to create secure users?
