Title
Knowbe4 Three-Year Contract
History
The Information Technology Department is requesting Board approval to enter a three (3) year contract renewal with KnowBe4, Inc. for its comprehensive cybersecurity awareness, compliance training, and phishing response platform.
The Village has been using multiple solutions from Knowbe4 including Cybersecurity Awareness & Education Training, HR Training and Phishing Training, Evaluation and Remediation since 2020.
Cyber Security Training includes training modules that cover password hygiene, social engineering, mobile security, data privacy, and safe browsing practices. The cybersecurity module tracks employee learning progress, completion rates, and individual risk scores across all departments.
Human Resources compliance training required for all employees include:
* Sexual Harassment Prevention Training: Fulfills mandatory statutory compliance requirements for workplace harassment prevention.
* Human Trafficking Awareness: Provides specialized awareness training for municipal staff to recognize and report potential indicators of human trafficking within the community.
* Situational Awareness: Equips employees with practical techniques to assess environments and maintain safety in field operations and public-facing facilities.
* First Amendment Auditor Training: Prepares public service employees and frontline staff to handle First Amendment audits professionally, legally, and in alignment with Village policy and public rights.
The last module from Knowbe4 includes Advanced Phishing Defense & Incident Response which includes;
* Simulated Phishing Campaigns: Conducts automated, realistic phishing tests to evaluate staff vulnerability and reinforce safe email habits.
* Phish Email Evaluations: Empowers employees to report suspicious emails via a single-click button, which automatically analyzes message headers and content.
* PhishRIP Remediation System: Integrates directly with Village email infrastructure. When a malicious or phishing email is identified, PhishRIP automatically searches all Village mailboxes and proactively deletes matching instances before other employees can open or interact with them.
The IT department is requesting the Board approve a three-year contract with Knowbe4. Committing to a three-year contract locks in current unit pricing for the entire duration of the term, guarding against inflation and annual vendor price escalations.
The cost of the three-year contract to be paid in three installments, Year 1 $33,602.66, Year 2 $33,602.67, and Year 3 $33,602.67 in Year 3, for a total cost of $100,808.00 for the three years.
Financial Impact
Knowbe4 has been budgeted for 2026 and will be included in budgets going forward.
Recommended Action/Motion
I move to approve the proposal from Knowbe4 for cybersecurity training, HR training and phishing testing for three (3) years in the amount not to exceed $100,808.00 as fully presented.
(Full Motion - not necessary to be read)
I move to approve a three-year contract with sole source vendor Knowbe4 for cybersecurity training, HR training and phishing testing at a cost of $33,602.66 for Year 1, $33,602.67 for Year 2 and $33,602.67 for Year 3 for a total three-year contract cost not to exceed $100,808.00;
AND
Authorize the Village Manager to execute all related contracts, subject to Village Attorney review.