01
Employees
We practise decisions made under time and authority pressure.
- Phishing, vishing, QR codes and fake sign-in
- MFA fatigue, passwords and secure reporting
- Data, devices and working away from the office
HUMAN SECURITY / TRAINING · PHISHING
Cybersecurity training and phishing simulations
We build the habits people need during a real incident — from recognising pressure and impersonation to reporting the event correctly.
This is not one generic webinar for the entire company. Scenarios are mapped to roles, tools and realistic attack paths, while success is measured through behaviour and reporting quality rather than attendance alone.
ROLE-BASED
Audience-specific content
SAFE SIMULATION
Controlled scenarios
METRICS
Behavioural evidence
PLAYBOOK
Improvement plan
01 / DECISION CONTEXT
When training creates the most value
- 01After introducing Microsoft 365, remote work or new payment processes.
- 02Ahead of an audit, customer requirement or incident-response exercise.
- 03When suspicious messages are reported too late or inconsistently.
- 04For leadership, helpdesk, finance, HR and administrators who need separate scenarios.
02 / TEST SURFACE
A programme shaped around real exposure
02
Higher-risk roles
Scenarios follow the permissions and processes of each role.
- Finance and supplier bank-detail changes
- Helpdesk and account recovery
- Leadership, HR, IT and administrators
03
Simulation and measurement
A controlled campaign produces evidence for process improvement.
- Approved pretexts and safe landing pages
- Reporting speed and quality instead of a shame ranking
- Post-campaign workshop and corrective actions
03 / DELIVERY
How the programme runs
- BR / 01
Risk profile
We identify roles, communication channels, critical processes and relevant incident history.
- BR / 02
Scenarios and safeguards
Language, difficulty, excluded data and the employee-support model are agreed in advance.
- BR / 03
Training and simulation
Short practical modules and approved exercises run without collecting real passwords.
- BR / 04
Measure and reinforce
We report behaviour, process gaps and a follow-up plan for selected groups.
04 / EVIDENCE STANDARD
A fake supplier bank change reaches the finance team
EXERCISE MODEL / NO CLIENT DATA
The value comes from testing the entire verification process, not counting clicks.
This is a safe exercise model. Scope and communication require prior organisational approval.
E-1
The message uses realistic context without sensitive data
E-2
The landing page collects no passwords or tokens
E-3
The exercise measures second-channel verification and reporting time
E-4
The outcome changes the payment procedure and drives targeted role training
05 / OUTPUT
What the organisation receives
01
Role-specific programme and materials
Included deliverable
02
Controlled phishing-simulation scenario
Included deliverable
03
Open, action and reporting-quality metrics
Included deliverable
04
Technical and process recommendations
Included deliverable
05
Leadership summary and reinforcement plan
Included deliverable
01Do you collect employee passwords?+
No. The simulation measures decisions and reporting, not real authentication data.
02Can training be delivered remotely?+
Yes. Modules can be remote or on site, with length and scenarios adapted to each group.
03Is the outcome used to rank employees?+
We recommend team and process-level analysis without public shaming. The objective is lower risk and faster reporting.
BR / NEXT STEP
Want to test behaviour rather than tick a training box?
Share the roles, headcount and critical processes. We will propose a programme and a safe measurement model.
NDA · clear scope · direct communication