Case Study > Krys Group

Cybersecurity at Scale: How Arsen Transformed Awareness at Krys Group

To strengthen its cybersecurity posture, Krys Group turned to Arsen, a flexible and easy-to-deploy phishing simulation platform. In just a short time, Arsen helped raise awareness across all teams—from headquarters to retail locations—driving measurable behavior change and embedding a stronger cybersecurity culture across the organization.

Krys Group

Industry

Commerce / e-commerce

Region

Europe

Employees

6000+

Krys Group

Since 1966, Krys Group has embodied French cooperative excellence in the fields of optics and hearing. With more than 1,600 stores and 345 hearing centers, the group relies on well-known brands such as Krys, Lynx Optique and Le Collectif des Lunetiers to offer a personalized, innovative and locally rooted customer experience.

Its unique distributor-producer model, firmly established in France, allows it to manufacture 95% of its lenses locally, ensuring high quality, full traceability and a tangible eco-responsible commitment.

With a turnover of 1.42 billion euros in 2024, Krys Group is reinforcing its leadership while preparing for the future through its strategic plan Krystal 2028. This ambitious roadmap accelerates network growth and strengthens the group's impact, driven by 6,000 dedicated employees serving the visual and hearing health of millions of people in France.

“With Arsen, it's very clear to track progress and see if our goals are being met.”
— Olivier L., IT Security and Compliance Expert

Challenge

Krys faced difficulties raising awareness among internal teams and store employees at the same time, the challenge was to standardize phishing tests across all staff and make those tests more regular, whether for corporate or in-store employees.

The group needed a smooth, customizable and agile solution, capable of providing actionable insights to support the continuous improvement of behaviors, along with a responsive, attentive and French-speaking support team.

The goal was to have an evolving tool that could meet concrete field needs while also helping the teams responsible for managing the platform.

Solution

First, implementing Arsen allowed Krys Group teams to organize phishing tests very easily, the fast setup and user-friendly interface made it possible to quickly launch campaigns without the need for development.“This simple experience for the main user, combined with efficient customer service, allowed us to quickly define a sending schedule and a coordinated strategy.”

The variety of available scenarios and the ability for users to easily modify them was a real advantage for testing without becoming repetitive.

In their ambition to test everyone and positively evolve the group’s cyber culture, the teams also needed to track results in order to focus efforts on specific departments or individuals. Thanks to easy result visualization and real-time tracking of campaign events within the platform, this became highly effective. “It’s very clear to see progress and check whether our goals are being reached.”

Results

The improvement in results is clearly noticeable, statistics are better than before. The real achievement is the increased awareness of phishing threats among teams and the emergence of a true internal cybersecurity culture. “The real gain is the internal communication this has generated around cybersecurity topics.”

When it comes to phishing, a significant shift in mindset is observed, because Arsen helps train user reflexes, making the impact much greater.

Arsen also acts as an icebreaker on broader cybersecurity topics, since all employees are exposed to campaigns and some respond by reporting suspicious messages, it creates opportunities to address cyber issues uniformly across the entire group. “It helps bring value to other cybersecurity topics and significantly increases internal awareness levels.”

Through its very approach, Arsen has become a powerful cultural lever within the company.

Book a demo

Learn what makes Arsen the go-to platform to help CISOs, cyber experts, and IT teams protect their organizations against social engineering.