Staggered Rollout: Essentials or Advanced

In this scenario, you'll deploy Material in multiple sessions and communicate with your users along the way.

Pros: Smaller changes to digest, time to identify any end user feedback or problems with overall deployment and improve

Cons: Your end users could feel like there are never-ending changes

Delivery Timing	Template Name
14-30 days prior	Introducing Material Security
At Email Threat response enablement	Email Threat Protection is Deployed
At File Data Security response enablement	File Data Security is Deployed

All templates include customizable content including your organization's name. Be sure to update (or sometimes remove) any inline directions. They're included in brackets and highlighted <like this>.

---

1. Introducing Material Security

Message Purpose: To inform your users that changes will be coming soon and why

Delivery Timing: Material recommends at least 14 days but no more than 30 days in advance of your Go-Live date so users do not forget about it.

📩 Introducing Material Security template

Message Subject:

Introducing <your company name>’s new information security provider, Material Security—and what it means for you

Message Body:

We’re pleased to announce that we’ve partnered with Material Security – an information security company – to protect <your company name> from key security risks. Material keeps connected accounts safe by protecting our company’s fundamental material—our emails, documents, and accounts —before, during, and after a breach.

With Material Security we can:

• Detect sophisticated email based attacks and take action fast through a variety of responses
• Detect potential risks related to files and attachments, including sharing of sensitive data
• Investigate issues quickly and improve our defenses to keep us safe even as attack methods change every day

Please be on the lookout for additional messages as we get closer to deploying Material Security. We’ll send a few emails over the next few weeks as we roll out different features over time. The entire process should take about 1-2 months to complete.

In the meantime, if you want to do a little more research on Material, feel free to take a look at their website here: https://material.security/

---

2. Email Threat Protection is Deployed

First, gather screenshots for your Email Threat Protection is Deployed message:

You need four screenshots for this template:

1. Screenshot A (User Report Response)
2. Screenshot B (Banner)
3. Screenshot C (Block)
4. Screenshot D (Speedbump)

📸 How to Get Screenshots A-D (User Report Response, Banner, Block, and Speedbump)

To get these screenshots:

1. Enable Email Threat remediation just for yourself (see Step Four in Enable Email Threat Protection).
2. Locate an email with an embedded link in your inbox and mark it as suspicious using your email provider's built in labels.
3. A User Report Response email should appear in your inbox momentarily (Screenshot A)
4. Return to Material.
5. Expand Issues, then click Email Threats.
6. Find the case for the email you marked suspicious, then open it.
7. Under Remediation, add a Block and a Banner (if not already there).
8. Click Save, but leave the case details open for a moment.
9. Return to your inbox and open the email you marked.
10. Take a screenshot of the banner on the email (screenshot B).
11. Click a link in the email.
12. Take a screenshot of the Block (Screenshot C)
13. Return to Material.
14. In the case details, change the Block to a Speedbump, then click Save.
15. Return to your inbox and open the email you marked.
16. Click a link in the email.
17. Take a screenshot of the Speedbump (Screenshot D).

Second, fill out the Email Threat Protection is Deployed template utilizing the screenshots you gathered:

Message Purpose: To inform your users about what to expect from email threat protection and how to make their own reports

Delivery Timing: When you enable Email Threat responses

📩 Email Threat Protection is Deployed template

Message Subject:

Material Security Email Threat Detection will be on in 7 days – what to expect

Message Body:

We recently sent you an email introducing Material Security, our new tool to protect <Your organization name> from email-based attacks. This email includes key information about changes you'll see in one week, and what to do if you have questions.

While many malicious messages will be deleted or moved out of your inbox automatically, others might remain accessible to you, but will look a little different:

• Links and attachments might first open a page asking you to verify you know the sender or simply block access to those links and attachments
• The message might include a banner to draw your attention to something suspicious about the message that you should notice before proceeding.

Examples of these situations are shown below. When you see these, please read them and follow the guidance. If you have questions, you can always reach us at <contact for the responsible team>.

• Screenshot B (Banner)
• Screenshot C (Block)
• Screenshot D (Speedbump)

You also have the power to report suspicious emails that have not been modified as described above or moved to Spam. To do this,

<alter these options to fit your process:>

• Label the email as Suspicious, or
• Forward the email to <the reporting address you included in Email Threat Settings>

You’ll get a thank you email in response and updates once we determine if the message is malicious or safe.

• Screenshot A (User Report Response)

Up Next: We’ll let you know when we officially deploy this functionality in about a week, then shortly after we’ll prepare to deploy File Data Security. You’ll receive a new email highlighting what to expect.

Thank you for your help and cooperation in protecting our organization! Any questions? Let us know here: <your preferred contact>

---

3. File Data Security is Deployed

First, gather screenshots for your File Data Security is Deployed message:

You need one screenshot for this template:

• File Issue Response Email

📸 How to Get File Issue Response Email screenshot

To get this screenshot:

1. In Material, click Detections.
2. Filter to Entity Type, File.
3. Scroll to the detection called File is publicly accessible, and open it.
4. Confirm Send Email is the first remediation step. If not, add it, then click Save.
5. Create a blank document in your drive. Update the Share settings to Anyone with the Link.
6. After a few moments, a File Issue Response Email appears in your inbox. Take a screenshot of that.

Second, fill out the File Data Security is Deployed template utilizing the screenshots you gathered:

Message Purpose: To inform your users about what to expect from File Date Security and how to open messages safely

Delivery Timing: When you enable File Data Security

📩 File Data Security is Deployed template

Message Subject:

Google Drive Data Security is enabled – what to expect

Message Body:

As you likely know from our previous emails and announcements, we’re slowly rolling out Material Security features to protect our company’s fundamental material—our emails, documents, and accounts —before, during, and after a breach.

Our next rollout is Google Drive Data Security. This feature identifies sensitive content (PII, financial data, legal documents, etc.) archived in your user mailboxes. On your end, you’ll get an email explaining the file issue, and sometimes access to the file will be automatically updated to comply with policy. The email you’ll receive looks something like this:

<Screenshot: File Issue Response Email>

Thank you for your help and cooperation in protecting our organization! This completes our Material Security deployment. Any questions? Let us know here: <your preferred contact>.