Swisscom is Switzerland's leadingtelecommunications provider, offering comprehensive digital services and state-of-the-artICT solutions. With a strong commitment to innovation, security, and dataprivacy, Swisscom continually prioritizes cybersecurity education and employeeawareness to sustain trust and safety for both customers and employees.
Swisscom sought to improve security training engagement and drive security culture with measurable resilience against phishing attacks, which are responsible for over 60% of data breaches. The solution needed to meet stringent data privacy and compliance standards critical to operations in Switzerland and across the DACH region.
Swisscom selected Hoxhunt for its DACH-friendly, innovative and gamified approach to phishing training and behavior change. Employees have more than tripled their reporting behavior and training engagement with Hoxhunt, but with a fraction of the administrative effort to operate the program. Hoxhunt’s ease of integration and onboarding, and its exceptional alignment with Swisscom’s company culture have come together to produce an 85% phishing simulation reporting rate.
Swisscom viewed employee engagement and morale as central to resilience and business culture. According to Marcus Beyer, “It’s important for us to have a training program where the goal is not to blame employees, but rather to create a good feeling and a sense of collaboration around security. We want people to feel motivated and enthusiastic about reporting phishing emails, and Hoxhunt has helped us accomplish that.”
Employees engaged with the Hoxhunt platform’s gamification and leaderboard features with an eagerness and at levels beyond expectations. Beyer described an internal culture of friendly competition: “We always compare notes in our Monday meetings to see who’s on top of the leaderboard. That’s very important for the collaborative and open security culture we foster at Swisscom.”
Marcus achieved remarkable outcomes without the additional expense or time needed for more manual solutions. The automated phishing simulations and intelligent feedback loops did the heavy operational lifting. Marcus allocated his team’s valuable time to strategic cybersecurity awareness initiatives rather than tactical administration.
"Like many security awareness training managers, I’m essentially a one-man show when it comes to our training program. Hoxhunt's AI enables automation that has allowed me to reach individuals and achieve results that would normally require several dedicated staff members. It’s changed what I thought a single person in my position can do."
Data protection and regulatory compliance were essential considerations—particularly for the Swisscom markets in Switzerland, Germany, and Austria. With flexibility around anonymization and privacy controls, Hoxhunt helped Swisscom address regional compliance needs effectively, such as alignment with NIS2 and other stringent data privacy regulations.
“We can tailor things very precisely, but also anonymize data as needed. Participants handle this themselves. Data protection and anonymization are extremely important for the DACH region, and Hoxhunt makes it easy to implement the right approach at the right place."
Hoxhunt helped Swisscom transform their phishing recognition and reporting culture. And the transformation was measurable.
“We have over 86% of employees actively using the report-phishing button whenever an email seems phishy and they're unsure whether it's a training or legitimate phishing email. Employees feel comfortable saying, ‘Before I click anything, I’ll just check.’ And that is the culture I hoped to create.”
Rather than creating mistrust, this strategy significantly boosted employees’ confidence and psychological safety while creating what Beyer described as a “safe harbor” for cybersecurity decision-making.
The human element of Hoxhunt helps Swisscom get the most out of its AI-powered features. The engagement, behavior, and culture change results came quickly with the Hoxhunt’s customer-focused onboarding process. With dedicated onboarding specialists and a clear, guided playbook built into their platform, Swisscom implemented the solution in less than one month, and began showing dramatic engagement and behavioral improvements to management within 6 months.
“It didn’t take longer than a month; we were basically ready after three to four weeks. We had all the support we needed. Onboarding was fantastic and we have not just a solution with Hoxhunt but a real partner.”