INSIGHT Partner Training Course -90 Minutest to th

Total duration: 1.5 hours

• Session 1: Platform overview and deployment essentials — 20 minutes
• Break: 15 minutes
• Session 2: Policies, risk logic, and core configuration — 20 minutes
• Break: 15 minutes
• Session 3: Dashboards, reporting, and Q&A — 20 minutes

What partners should understand by the end

• How INSIGHT is deployed across endpoints and Microsoft 365.
• How policies, organisation settings, and risk definitions shape monitoring.
• How to review activity in dashboards and use reports for follow-up.

Trainer preparation and demo environment checklist

Before delivering the training, prepare and verify the following:

• A reachable GuardWare Management Console URL.
• One working admin account with 2FA completed.
• At least one online endpoint with the INSIGHT agen t installed.
• At least one visible user in INSIGHT > End Users.
• One configured user policy.
• Risk definitions configured for the main monitored categories.
• Enough activity data to demonstrate dashboard drill-downs and reports.
• Microsoft 365 integration configured, or screenshots prepared, if Exchange Online or SharePoint Online monitoring will be shown.
• One demo endpoint with INSIGHT Status Monitor available.

Session 1: Platform overview and deployment essentials

Duration: 20 minutes

Session goal

Give partners a clear view of what INSIGHT monitors, how data reaches the console, and how to confirm the platform is working.

1. Product overview - 5 minutes

Cover the core INSIGHT flow.

Explain the main components:

• GuardWare Management Console.
• Windows endpoints running the INSIGHT agent.
• Exchange Online and SharePoint Online through Cloud Monitor.

For reference, use Introduction to INSIGHT.

2. Access and Microsoft 365 setup — 5 minutes

Show the standard admin access flow:

• Sign in to the Management Console.
• Complete 2FA if prompted.
• Connect Microsoft 365 when cloud monitoring is in scope.

Then show what the integration enables:

• Exchange monitoring.
• SharePoint monitoring.
• Cloud sync visibility.

3. Agent install and validation — 10 minutes

Walk through the deployment path:

• Resources > Agent Download.
• Download and install the INSIGHT agent.
• Confirm the device appears in INSIGHT > Devices.
• Confirm the user appears in INSIGHT > End Users.
• Use INSIGHT Status Monitor to verify health and settings.

Call out the key checks:

• Device and user name.
• Last online time.
• Assigned setting.
• Agent status.

For reference, use INSIGHT Devices, INSIGHT Users, and INSIGHT Status Monitor.

Demo outcomes

By the end of Session 1, partners should have seen:

• How INSIGHT is structured.
• How cloud monitoring is connected.
• How the agent is installed and validated.

Session 2: Policies, risk logic, and core configuration

Duration: 20 minutes

Session goal

Show how INSIGHT decides what to monitor and how severity is applied.

1. Configuration model overview — 5 minutes

Start with the relationship between the main configuration areas:

• Organisation Settings define the monitoring context.
• User Policies define monitored behaviour.
• Risk Definitions assign severity.
• Advanced Settings control endpoint behaviour.

2. Organisation Settings and User Policies — 10 minutes

Show the highest-value settings first:

• Websites and applications.
• Email domains and trusted emails.
• USB and printer context.
• Data type controls inside a user policy.

Then show a simple policy example:

• Monitor AI website uploads.
• Warn on sensitive email attachments.
• Block selected transfers to storage media.

For reference, use Organisation Settings and User Policies.

3. Risk Definitions and applying changes — 5 minutes

Show how risk is assigned to monitored activities.

Explain why this matters:

• Dashboards become easier to prioritise.
• Reports become more meaningful.
• Teams can align alerts with business risk.

Then show how to verify that changes have applied on the endpoint.

For reference, use Risk Definitions and INSIGHT Status Monitor.

Demo outcomes

By the end of Session 2, partners should understand:

• How the main INSIGHT settings fit together.
• How to create a simple user policy.
• How risk levels affect visibility.

Session 3: Dashboards, reporting, and Q&A

Duration: 20 minutes

Session goal

Show partners how to review activity quickly and explain the main follow-up options.

1. Dashboard overview — 10 minutes

Open INSIGHT > Dashboard and focus on the core views:

• Risk Summary.
• Data Type Risks.
• AI Usage Risks.
• Behaviour Risks.
• SharePoint Risks when cloud monitoring is enabled.

Show how to use:

• Filters.
• Widget drill-down.
• User, device, and time-based views.

For reference, use INSIGHT Dashboard.

2. Reporting and awareness workflows — 5 minutes

Cover the fastest reporting paths:

• Risk Summary for scheduled admin visibility.
• Cyber Awareness for end-user guidance.

Explain when each is useful:

• Risk Summary for oversight.
• Cyber Awareness for behaviour change.

For reference, use Cyber Awareness.

3. Q&A and operational close — 5 minutes

Finish with the standard health checks:

• Device online status.
• Last cloud sync.
• Status Monitor for endpoint diagnostics.

Position this as the first response when a customer reports missing data or stale devices.

Demo outcomes

By the end of Session 3, partners should be able to:

• Navigate the main dashboard views.
• Drill into core incidents.
• Explain the role of Risk Summary and Cyber Awareness.
• Perform basic health checks.

If time is tight, use one prepared dashboard path and one prepared report instead of multiple live examples.