KnowBe4

Cybersecurity United States Website Reviewed Sept. 2, 2026

Security awareness training and simulated phishing platform, commonly used to evidence staff training controls.

Report an issue with this profile

Certifications & Accreditations

Certification Certifying Body Scope Achieved Expiry Status
ISO/IEC 27001 Accredited third-party certification body KnowBe4 platform and supporting ISMS — — Current
ISO 27017 and ISO 27018 Accredited third-party certification body Cloud security controls and protection of PII in public cloud — — Current
SOC 2 Type II Independent third-party auditor KnowBe4 security awareness training platform; report available under NDA — — Current

Compliance Frameworks

ISO/IEC 27001:2022
Full
SOC 2 Type 2
Full
GDPR 2016/679
Full
EU data residency available; processor under its DPA
NIST Cybersecurity Framework
Partial
Supports NIST CSF awareness and training outcomes
CIS V8
Partial
Supports CIS Control 14 security awareness and skills training

Assess KnowBe4 in your own vendor risk programme

SnapGRC lets you send security questionnaires, track DPA status, manage sub-processors, and maintain a supplier risk register — all audit-ready.

Supplier Management Free Risk Register