Phishing, QR codes & impersonation
Recognise suspicious requests across email, messaging, voice and video. Verify independently before acting.
03 / Cyber security training
Better instincts.
Stronger
defence.
Build the confidence to pause, verify and report. Practical cybersecurity awareness that helps people make safer decisions at work.
Practical learningRelevant scenariosMeasurable progress
It starts with one decision
Would your team
know what to do next?
Realistic situations make security easier to remember. Explore an example of the thinking we want people to practise.
What would you do next?
Choose an action to explore the reasoning. This is an illustrative exercise, not an assessment.
People learn best when the scenarios feel like their work.
Designed for today’s workplace
Relevant to the role.
Useful the next day.
Passwords, passkeys & MFA
Build safer account habits, understand approved authentication methods and avoid unexpected approval requests.
AI tools & information handling
Use approved tools, respect data classification and avoid sharing confidential information without permission.
Privacy in everyday work
Practise collecting, sharing and retaining personal data according to organisational policy and role responsibilities.
Device, mobile & remote work security
Keep devices updated, use approved access methods and handle work information safely outside the office.
Incident reporting & recovery habits
Know the reporting channel, what details to provide and what to do after a click, disclosure or unexpected prompt.
Learning that fits your organisation
More than a presentation.
A habit worth building.
Choose the delivery and follow-up that suit your audience, working patterns and risk priorities. Content and formats are agreed in the programme scope.
Facilitated workshops
Interactive classroom or virtual sessions with discussion, practical examples and decisions relevant to each role.
Digital learning
Structured e-learning or short refreshers that help distributed teams revisit core concepts at an appropriate pace.
Scenario practice
Agreed exercises or phishing simulations that reinforce recognition, verification and reporting behaviours.
UNDERSTAND→LEARN→PRACTISE→MEASURE→REINFORCE
Simulation campaigns are scoped separately where required. We agree the audience, scenarios, data collected and reporting approach before launch.
Progress you can learn from
Measure learning.
Encourage reporting.
Build trust.
Completion is only the beginning. Combine learning checks with relevant behavioural indicators to decide what to reinforce next.
Use proportionate reporting, agreed access and a supportive approach. The goal is better decisions and earlier reporting—not blame.
Understanding
Before-and-after knowledge checks where included.
Participation
Completion and engagement across the agreed audience.
Reporting
How promptly and appropriately people flag suspicious activity.
Reinforcement
Topics and groups that would benefit from targeted follow-up.
From training day to everyday
A programme your team
can keep moving.
Build around your policies, reporting channels and workforce—not generic fear-based statistics.
A tailored learning plan
Agreed objectives, audiences, topics and formats, including role-specific needs for finance, HR, leadership or technical teams.
Practical materials
Learning resources, scenarios and relevant guidance aligned with the agreed curriculum and organisational policies.
An evaluation summary
Results from the agreed learning checks or exercises, with context and limitations clearly stated.
A reinforcement roadmap
Recommendations for refreshers, communications and follow-up activities that keep the learning active.
Before we begin
Good questions.
Clear answers.
Is the training suitable for non-technical staff?
Yes. We focus on practical decisions and familiar work situations. Content, terminology and activities are adapted to the audience and their responsibilities.
Can the programme reflect our internal policies?
Yes. Share the relevant policies, approved tools, reporting routes and examples during planning so the learning connects with how your organisation works.
Does the programme include phishing simulations?
Simulations can be included by agreement. We define audience, scenarios, approval, data handling and reporting before launch. They are not automatically included in every training engagement.
Can you guarantee fewer incidents or legal compliance?
No training programme can guarantee a particular incident rate or compliance outcome. Awareness supports a wider programme of technical controls, processes, governance and continuous improvement.
What do you need to prepare a proposal?
Tell us the audience size, roles, preferred language and format, priority topics, schedule and desired evaluation approach. We will recommend a scope that fits.
Let’s make the next move
Make safer decisions
part of the culture.
Tell us about your people, their everyday work and the behaviours you want to strengthen. Let’s build a programme that fits.
