Concepts
Audience filters: an advanced way to target specific people at your organisation.
Key points
In this article, we'll discuss how filtering works and explain the various options available to you.
If you're building a workflow, or targeting your people with a learning, nudge or phishing campaign, you're likely to come across audience filters.
You don't always have to use filters. Simply leave the filters section blank and everyone in your organisation will be included by default. (shown in example 1).
The principle behind audience filters
Let's say you wanted to send an alert to your entire organisation via MS Teams. By default, CybSafe would send it to everyone.
But what if you just wanted to target people who are more susceptible to phishing emails? Audience filters let you narrow the pool of people who receive messages to those who meet certain criteria.
Examples
No selected filter
The example below shows an empty filter field which will by default included the entire organisation (47 recipients in this instance).
Group filtering
Example of filtering by people who are in the Information Security group. Which has narrowed the pool to 7 people.
Method
We can use the drop down on the left to decide how the filters work.
In the example below we've chosen "Is in" which will look to see if a user is in any (but not all) of the selected groups.
We could also change this to "Not in" which would include anyone who isn't in the selected group. So if you wanted to contact everyone BUT the information security team, you would use the 'Not in" filter.
Using multiple filters
If you desire, you can be even more advanced and add a combination of different filters, stacking them together.
IMPORTANT: Adding more than one filter requires you to define whether people must satisfy ALL of the filters to be included, or at least one (ANY).
Selecting ALL looks for anyone who meets both filter 1 and filter 2
Selecting ANY looks for anyone who meets filter 1 OR filter 2 OR both filters 1 and 2.
In the example below, we've chosen to target people who are in either the Information Security Group OR the marketing group (or both) by selecting the ANY option above.
Selecting ALL looks for anyone who meets both filter 1 and filter 2
Selecting ANY looks for anyone who meets filter 1 OR filter 2 OR both filters 1 and 2.
Filtering by department, start date or manager
If your organisation syncs directory data into CybSafe, the picker also includes fields like Department, Job title, Employee type, Office and Hire date, plus reporting-line filters such as Directly reports to. These let you target the way your organisation is actually shaped, without building a group for every team.
A few ways people use them:
Hire date is within 30 days as the audience for an onboarding learning campaign. New starters join it automatically as they're added.
Department is equal to Finance on a phishing campaign that uses an invoice-themed template.
Employee type is equal to Contractor combined with ALL and a behaviour filter, to nudge contractors who haven't reported a fake email yet.
Is a manager set to Person is a manager as the audience for a notification asking managers to talk to their teams.
The full list of fields and operators is in the Reference guide: Audience filters.