Train your people like a control, not a checkbox
Sixty-two percent of breaches involve a person: a click, a password typed into the wrong page, an MFA prompt approved at the wrong moment (Verizon 2026 Data Breach Investigations Report). Technology cannot close that gap on its own. Our programme measures it the way we measure patching and backups: a baseline, a monthly test, and a number that should move.
What your people learn
Six short modules, delivered a few minutes at a time rather than in an annual hour nobody remembers. Each one ends with a scenario, not a quiz about definitions.
Phishing recognition
Real lures, not cartoon ones: look-alike domains, invoice changes, delivery notices, executive requests. Staff learn the three checks that catch most of them.
Passwords and MFA
Why one reused password is enough, how a password manager works day to day, and what an MFA prompt you did not ask for means.
Social engineering
Phone calls, text messages and impersonation of executives, vendors and the bank. The scripts attackers use, and the one question that breaks them.
Safe browsing and downloads
Fake login pages, poisoned search results, browser extensions and unapproved software, and how to check a link before trusting it.
Reporting, fast
What to do in the first five minutes after a mistake, who to tell, and why reporting a click is rewarded rather than punished.
Working away from the office
Home networks, public Wi-Fi, personal devices and shared family computers, with the small set of habits that keep company data off them.
How the programme runs
We run the campaigns and the follow-up. You see the results: by department, by quarter, in a report you can hand to your insurer. Part of the Security Awareness Training service, and one of the ten baseline controls every managed client gets.
- ✓A baseline phishing test before any training starts, so the first number is real
- ✓Monthly simulations with varied lures; click rate and report rate tracked by department
- ✓Short training assigned automatically to anyone who clicks, within minutes, while the lesson is fresh
- ✓Role-based content for finance, executives and IT, the people attackers target first
- ✓A repeat-clicker programme that escalates coaching, not blame
- ✓A quarterly report in a format insurers and auditors accept, with trends you can act on
- ✓Runs through your Microsoft 365 tenant: no new logins for staff, and we administer the campaigns
Start with a baseline
Book a free consultation and we will show you a sample quarterly report, explain how the baseline test works, and scope a programme for your team size and sector.
Book a free consultation →