INSIGHT Partner Training Course -90 Minutest to th
Total duration: 1.5 hours
Session 1: Platform overview and deployment essentials — 20 minutes
Break: 15 minutes
Session 2: Policies, risk logic, and core configuration — 20 minutes
Break: 15 minutes
Session 3: Dashboards, reporting, and Q&A — 20 minutes
What partners should understand by the end
How INSIGHT is deployed across endpoints and Microsoft 365.
How policies, organisation settings, and risk definitions shape monitoring.
How to review activity in dashboards and use reports for follow-up.
Trainer preparation and demo environment checklist
Before delivering the training, prepare and verify the following:
A reachable GuardWare Management Console URL.
One working admin account with 2FA completed.
At least one online endpoint with the INSIGHT agen t installed.
At least one visible user in INSIGHT > End Users.
One configured user policy.
Risk definitions configured for the main monitored categories.
Enough activity data to demonstrate dashboard drill-downs and reports.
Microsoft 365 integration configured, or screenshots prepared, if Exchange Online or SharePoint Online monitoring will be shown.
One demo endpoint with INSIGHT Status Monitor available.
Session 1: Platform overview and deployment essentials
Duration: 20 minutes
Session goal
Give partners a clear view of what INSIGHT monitors, how data reaches the console, and how to confirm the platform is working.
1. Product overview - 5 minutes
Cover the core INSIGHT flow.
Explain the main components:
GuardWare Management Console.
Windows endpoints running the INSIGHT agent.
Exchange Online and SharePoint Online through Cloud Monitor.
For reference, use Introduction to INSIGHT.
2. Access and Microsoft 365 setup — 5 minutes
Show the standard admin access flow:
Sign in to the Management Console.
Complete 2FA if prompted.
Connect Microsoft 365 when cloud monitoring is in scope.
Then show what the integration enables:
Exchange monitoring.
SharePoint monitoring.
Cloud sync visibility.
3. Agent install and validation — 10 minutes
Walk through the deployment path:
Resources > Agent Download.
Download and install the INSIGHT agent.
Confirm the device appears in INSIGHT > Devices.
Confirm the user appears in INSIGHT > End Users.
Use INSIGHT Status Monitor to verify health and settings.
Call out the key checks:
Device and user name.
Last online time.
Assigned setting.
Agent status.
For reference, use INSIGHT Devices, INSIGHT Users, and INSIGHT Status Monitor.
Demo outcomes
By the end of Session 1, partners should have seen:
How INSIGHT is structured.
How cloud monitoring is connected.
How the agent is installed and validated.
Session 2: Policies, risk logic, and core configuration
Duration: 20 minutes
Session goal
Show how INSIGHT decides what to monitor and how severity is applied.
1. Configuration model overview — 5 minutes
Start with the relationship between the main configuration areas:
Organisation Settings define the monitoring context.
User Policies define monitored behaviour.
Risk Definitions assign severity.
Advanced Settings control endpoint behaviour.
2. Organisation Settings and User Policies — 10 minutes
Show the highest-value settings first:
Websites and applications.
Email domains and trusted emails.
USB and printer context.
Data type controls inside a user policy.
Then show a simple policy example:
Monitor AI website uploads.
Warn on sensitive email attachments.
Block selected transfers to storage media.
For reference, use Organisation Settings and User Policies.
3. Risk Definitions and applying changes — 5 minutes
Show how risk is assigned to monitored activities.
Explain why this matters:
Dashboards become easier to prioritise.
Reports become more meaningful.
Teams can align alerts with business risk.
Then show how to verify that changes have applied on the endpoint.
For reference, use Risk Definitions and INSIGHT Status Monitor.
Demo outcomes
By the end of Session 2, partners should understand:
How the main INSIGHT settings fit together.
How to create a simple user policy.
How risk levels affect visibility.
Session 3: Dashboards, reporting, and Q&A
Duration: 20 minutes
Session goal
Show partners how to review activity quickly and explain the main follow-up options.
1. Dashboard overview — 10 minutes
Open INSIGHT > Dashboard and focus on the core views:
Risk Summary.
Data Type Risks.
AI Usage Risks.
Behaviour Risks.
SharePoint Risks when cloud monitoring is enabled.
Show how to use:
Filters.
Widget drill-down.
User, device, and time-based views.
For reference, use INSIGHT Dashboard.
2. Reporting and awareness workflows — 5 minutes
Cover the fastest reporting paths:
Risk Summary for scheduled admin visibility.
Cyber Awareness for end-user guidance.
Explain when each is useful:
Risk Summary for oversight.
Cyber Awareness for behaviour change.
For reference, use Cyber Awareness.
3. Q&A and operational close — 5 minutes
Finish with the standard health checks:
Device online status.
Last cloud sync.
Status Monitor for endpoint diagnostics.
Position this as the first response when a customer reports missing data or stale devices.
Demo outcomes
By the end of Session 3, partners should be able to:
Navigate the main dashboard views.
Drill into core incidents.
Explain the role of Risk Summary and Cyber Awareness.
Perform basic health checks.
Last updated