Request Demo
Case Study

BookNook Strengthens Human Risk Management and Security Awareness Across a Complex Education Ecosystem

Industry
Education Technology
Founded
2016
Headquarters
Cincinnati, OH
Employees
50
About the Company

Delivering High-Impact Tutoring at Scale

BookNook is an education technology company focused on helping K–8 students improve reading and math outcomes through high-impact virtual tutoring programs.

Working with schools and education partners across the United States, the organization supports student learning through technology-enabled instruction while managing sensitive student and partner data across a highly regulated environment.

For BookNook's IT and Security team, maintaining a strong security posture meant balancing usability, compliance, and awareness across a fast-moving educational ecosystem.

The Challenge

Managing Risk Across Evolving Requirements

As an education technology company handling student PII and working with multiple school systems and partners, BookNook faced a uniquely complex security environment.

According to Ben Koshland, IT/Security Manager at BookNook:

"We have to navigate various policy requirements of our partners as they have individual, state, and federal regulations that must be met."

Ben also highlighted the ongoing need to remain aware of changing technologies, as well as the emerging risks that continue to affect schools and educational organizations across the country.

Like many growing organizations, BookNook wanted a more scalable and reliable approach to its awareness training, phishing simulations, reporting, and day-to-day employee engagement.

01Scale awareness training reliably across a growing team
02Run phishing simulations tailored to real, relevant threats
03Centralize reporting and improve engagement visibility
04Navigate individual, state, and federal policy requirements
The Solution

Practical Awareness Built Around Real Risks

BookNook selected Right-Hand as a human risk management partner because the platform combined usability, flexibility, and strong integration capabilities in a way that aligned with the organization's operational needs.

Ben Koshland explains:

"Right-Hand provides a clear, affordable solution for our company. As a security tool, it provides a myriad of solutions and integrates with other applications."

Implementation was straightforward and efficient, allowing BookNook to quickly operationalize the platform without creating friction for internal teams.

Ben describes the implementation process simply:

"Smooth!"

BookNook also worked closely with Right-Hand's customer success team to tailor phishing simulations and employee training experiences around scenarios relevant to the organization's day-to-day operations.

This allowed awareness initiatives to feel more contextual and realistic for employees rather than generic compliance exercises.

As Ben notes:

"The customer support is fantastic. They are strategic partners for all of our trainings, helping us tailor these employee experiences to mimic scenarios relevant to our day-to-day. It's a great asset in human risk management."

Operational Impact

Simplifying Training and Improving Awareness

For BookNook, one of the biggest operational advantages came from reducing the amount of manual effort required to manage awareness initiatives.

Automation, centralized reporting, and actionable notifications helped simplify training administration while giving the security team clearer visibility into employee engagement.

According to Ben:

"Having a reliable partner for training has done a great deal to simplify our workload. Trainings are automated, reporting is easy to access, and notifications are all actionable."

The organization also saw strong value in phishing simulations tailored specifically to its environment and threat landscape.

Rather than relying on generic awareness exercises, BookNook was able to create more relevant training experiences that better reflected the types of attacks employees might realistically encounter.

Ben explains:

"The phishing simulations are tailored to our universe and consequently, my team's awareness has skyrocketed."

Why Right-Hand

A True Human Risk Management Partner

For BookNook, the relationship with Right-Hand extended beyond software alone.

The combination of responsive support, practical training capabilities, and collaborative program development helped the organization strengthen awareness while simplifying day-to-day operations for internal teams.

Reflecting on the partnership, Ben Koshland says:

"As cybersecurity threats are constantly evolving, Right-Hand's team has been a wonderful asset to lean on to reduce risk."

BookNook also highlighted the usability of the platform and the hands-on guidance provided throughout the engagement.

Ben adds:

"The customer service from this team is top-tier. The product is already very user-friendly, but the Right-Hand team takes the time to make sure you are exploring all the tools available."

About
Right-Hand Cybersecurity

Right-Hand Cybersecurity is a Human Risk Management organization helping businesses reduce human-related cyber risk through AI-powered security awareness, phishing simulations, deepfake vishing simulations, and behavior-driven training. By integrating with existing security ecosystems and delivering contextual, real-time learning experiences, Right-Hand helps organizations move beyond static awareness programs toward measurable human risk reduction.

Request a demo right-hand.ai
© 2026 Right-Hand Cybersecurity