In an era when cybersecurity vendors are racing to differentiate themselves not just on technology but on the depth and durability of their customer relationships, KnowBe4 has made a strategic leadership move that signals where the company sees its next phase of growth. The Clearwater, Florida-based human risk management platform has appointed Kelly Morgan as its new Chief Customer Officer, a hire designed to unify and elevate the entire customer lifecycle — from onboarding to renewal to expansion — across the company’s global operations.
The appointment, first reported by IT Security Guru, comes at a pivotal moment for KnowBe4. The company, which was taken private by Vista Equity Partners in a $4.6 billion deal that closed in 2023, has been aggressively broadening its portfolio beyond security awareness training into a comprehensive human risk management (HRM) platform. That evolution demands a fundamentally different approach to how the company engages with and retains its more than 70,000 customer organizations worldwide.
A Seasoned Operator for a Complex Customer Mission
Kelly Morgan arrives at KnowBe4 with a track record that spans multiple high-growth enterprise software companies. Her background includes senior customer success and operations leadership roles where she was responsible for building scalable post-sale organizations, reducing churn, and driving net revenue retention — metrics that have become the lifeblood of SaaS business models. According to IT Security Guru, Morgan’s mandate at KnowBe4 will encompass the full spectrum of the customer journey, including customer success, professional services, support, and customer engagement programs on a global scale.
The creation and filling of a dedicated Chief Customer Officer role is itself a statement of intent. While many cybersecurity companies have vice presidents of customer success or support, elevating the function to the C-suite reflects a recognition that customer experience is no longer a back-office function — it is a strategic lever that directly impacts revenue growth, competitive positioning, and long-term enterprise value. For a company operating under private equity ownership, where operational efficiency and predictable revenue streams are paramount, the appointment is particularly telling.
The Human Risk Management Pivot Demands Deeper Customer Engagement
KnowBe4 built its reputation — and its massive customer base — on security awareness training, the practice of educating employees to recognize phishing emails, social engineering attacks, and other threats that exploit human behavior. The company’s founder and longtime evangelist, Stu Sjouwerman, turned the concept into a category-defining business, making KnowBe4 the world’s largest security awareness training provider.
But the company has been making a deliberate and public transition toward what it calls human risk management — a broader discipline that encompasses not just training but also real-time risk scoring, behavioral analytics, policy enforcement, and integration with an organization’s broader security stack. This shift, which KnowBe4 has been articulating through product launches and marketing over the past two years, fundamentally changes the nature of the customer relationship. Security awareness training can be deployed relatively quickly and managed with light touch. A full HRM platform, by contrast, requires deeper integration, more complex onboarding, ongoing optimization, and continuous value demonstration to multiple stakeholders within a customer organization, from CISOs to HR leaders to line-of-business managers.
Why Net Revenue Retention Is the New Battleground
The appointment of Morgan also reflects a broader trend across the enterprise software industry: the growing primacy of net revenue retention (NRR) as the metric that separates great SaaS companies from merely good ones. In an environment where new customer acquisition costs continue to rise and macroeconomic uncertainty makes budget holders more cautious, the ability to expand revenue within existing accounts has become critical. For KnowBe4, which has tens of thousands of customers ranging from small businesses to Fortune 500 enterprises, the opportunity to upsell and cross-sell HRM capabilities into an installed base that already trusts the brand is enormous — but only if the customer experience is seamless and the value proposition is clearly articulated at every stage.
A Chief Customer Officer with a mandate to own the global customer lifecycle is the organizational mechanism for capturing that opportunity. Morgan’s role will likely involve building or refining the data infrastructure that allows KnowBe4 to identify expansion opportunities, detect early warning signs of churn, and ensure that customers are realizing measurable outcomes from their investments. In the private equity context, these capabilities translate directly into the kind of durable, compounding revenue growth that supports a premium valuation at eventual exit.
Vista Equity’s Operational Playbook at Work
It is impossible to discuss KnowBe4’s strategic moves without acknowledging the influence of Vista Equity Partners, the Austin-based private equity firm that has built a formidable reputation for operational transformation in enterprise software. Vista’s playbook, refined across dozens of portfolio companies, places heavy emphasis on customer success infrastructure, pricing optimization, and go-to-market efficiency. The firm’s operating group, which works closely with portfolio company management teams, has consistently pushed for the kind of customer-centric organizational design that Morgan’s appointment represents.
Since going private, KnowBe4 has had the freedom to make long-term investments without the quarterly earnings pressure of public markets. The company has used that latitude to accelerate its HRM platform development, expand internationally, and now, with Morgan’s hiring, to professionalize and scale its customer-facing operations. Industry observers note that Vista-backed companies that execute well on customer retention and expansion tend to emerge from private ownership with significantly improved financial profiles, positioning them for either a return to public markets or a strategic sale at a substantial premium.
The Competitive Pressure to Own the Human Risk Category
KnowBe4’s move also comes amid intensifying competition in the human risk management space. Companies like Proofpoint, Mimecast, and a host of smaller startups have been expanding their own offerings to address the human element of cybersecurity, recognizing that technology alone cannot solve the problem of employees clicking on malicious links or falling for sophisticated social engineering schemes. The market for security awareness and human risk solutions has been growing at double-digit rates, driven by regulatory requirements, the proliferation of AI-powered phishing attacks, and a growing recognition among boards of directors that human risk is a governance issue, not just an IT issue.
In this competitive environment, customer experience becomes a powerful differentiator. Organizations that feel well-supported, that see measurable reductions in human risk, and that have a clear path to expanding their use of the platform are far less likely to entertain pitches from competitors. Morgan’s ability to build that kind of loyalty at scale — across geographies, customer segments, and use cases — will be a key determinant of whether KnowBe4 can maintain and extend its market leadership as the HRM category matures.
What This Signals for the Broader Cybersecurity Industry
The elevation of customer success to the C-suite at KnowBe4 is part of a larger pattern in the cybersecurity industry. As vendors consolidate and platform plays become the dominant go-to-market strategy, the complexity of customer relationships increases correspondingly. Organizations are no longer buying point products; they are investing in platforms that touch multiple teams, integrate with dozens of other tools, and require ongoing configuration and optimization. The vendors that win in this environment are those that treat customer success not as a cost center but as a revenue engine.
For KnowBe4, the stakes are particularly high. The company’s transition from a training vendor to an HRM platform company is arguably the most important strategic initiative in its history. Success depends not just on building great technology but on ensuring that customers adopt it, derive value from it, and expand their use of it over time. Kelly Morgan’s appointment as Chief Customer Officer is a clear signal that KnowBe4’s leadership understands this imperative and is investing accordingly.
As the cybersecurity industry continues to evolve, the companies that build the strongest customer relationships — not just the most advanced technology — will be the ones that endure. KnowBe4’s bet on Morgan and the CCO function suggests that the company is positioning itself to be among them.
Pingback: KnowBe4’s Bold Bet On Customer-Centricity: Why The Cybersecurity Giant Tapped Kelly Morgan To Reshape Its Growth Playbook - AWNews