Review employee analytics

Use Analytics → Employees to review results across employees and open an individual’s history. If this section is not available, contact Jericho Support to confirm your organization’s access.

Choose the audience and period

1. Open Analytics → Employees.
2. Select the reporting period, using Custom when you need specific dates.
3. Open Search Employee, then choose Filter Employees to narrow the audience by the available group filters, or Search Employee to find a person.
4. Confirm the audience and dates before comparing a table, chart, or export.

Employee performance metrics use simulations delivered in the selected period and the relevant events within that period. A report covering only recent activity can therefore differ from a campaign report that includes earlier deliveries. Test-run campaigns are excluded from the standard employee performance calculations.

Choose a view

Tab	Use it for
Overview	Review summary metrics, Leaderboard, and Action Board. Use View all where offered to go beyond the short lists.
Performance	Compare deliveries, failures, and reports by employee.
Training	Review employee training completion, training time, and related risk information. For assignment status, also use training assignments.
Risk Score	Review Risk Score Trend, Risk Score Details, and Top Vulnerabilities.
Click Timeline	Review monthly click activity over the current month and preceding five months. This view uses its own six-month window rather than the page’s selected date range.

Reporting and failure measures

Employee Fail Rate is the number of failed simulation recipients divided by delivered simulation recipients in the reporting scope. Employee Report Rate uses successful reported recipients divided by deliveries. These are not counts of unique people across your organization.

The Leaderboard / Top Reporters counts qualifying reports without a preceding counted failure. The campaign overview’s Reported count uses that successful-report rule too. An employee who fails a simulation and then reports it can still have a raw report event in recipient details or chart data. The employee failure calculation also excludes qualifying interactions recorded after the simulation was already reported.

Action Board ranks employees by failed simulation-recipient count. Its Highest risk members subtitle does not mean it is sorted by the separate numeric risk score. Use Risk Score Details when that is the ranking you need.

Risk scores and repeat behavior

Use risk scores and Top Vulnerabilities to prioritize follow-up, alongside the employee’s simulation and training history. A risk score is a separate measure from Fail Rate; do not read it as a percentage of simulations failed or a probability that the employee will cause an incident.

The displayed risk bands are low below 50, medium from 50 to below 80, and high from 80 through 100. Compare the same period and audience when assessing change. No data available is not evidence of low risk.

Repeated activity has different meanings across views:

• Click Timeline counts filtered click activity in click and click-and-download simulations. Repeated events can contribute multiple counts; it is not a count of distinct failed campaigns or all attack types.
• The Repeat Offender badge in Security Journey identifies failures across at least two distinct campaigns within the selected period. Although the badge says “clicked,” its qualifying failures follow each campaign’s attack type and can include more than link clicks.

Open the underlying campaign history before deciding which training to assign.

Open an employee’s Security Journey

1. Find the employee using Search Employee or open their name from an analytics table.
2. Confirm the name, email, and reporting dates.
3. Select Security Journey.
4. Use Filter by Campaign to select a campaign, or All Campaigns to review the available history.
5. Review simulation delivery, interaction, reporting, and training milestones together. Follow up on incomplete or overdue training using the assignment’s current status.

The journey includes eligible simulations delivered during the selected period. An empty journey does not establish that the employee has never received a simulation. Expand the period before escalating missing history.

Interpret time measurements

In Top Reporters, Avg Time to Report measures elapsed time from delivery to the first report for qualifying reported simulations. Avg Time to Open measures delivery to the first recorded open for that reporting population. They are not measurements of how long someone actively read or worked on the message.

Check the units on the card or table; the leaderboard labels these durations in seconds. Missing timestamps may leave no usable duration, and open timing is subject to email image loading and automated processing. Do not interpret missing time data as an immediate response.

Export and follow up

Use Export as CSV on the relevant report where available. Confirm dates and audience filters first; employee analytics exports are prepared for delivery by email. Admin and Manager can export; Viewer cannot. See workspace roles.

For an unexplained difference, use Compare dashboards and exports and contact Support with the specific view, period, and metric.