Awareness training
Training and phishing tests that change habits
Most incidents start with a person, not a firewall. We run short training and simulated phishing for your team and keep the records for your proof pack.
Who it is for
Who this is for.
Businesses that need staff to spot threats and need a record that they did.
Staff click on things
A convincing email gets through, and one click is enough to cause real harm.
Training is an annual video
A yearly session nobody remembers does not change behaviour.
A certifier or client asks for records
Awareness training is required from SMB1001 Bronze (control 5.1.0.0), and records need to be kept.
What changes
From a yearly video to a habit.
First
Your team is enrolled, and a first simulated phishing email shows where you stand.
Then
Short modules and regular simulations run on a schedule. People who click get targeted help.
Ongoing
New starters are enrolled automatically, and training records flow into your proof pack.
How it works
How it works.
We enrol your teamYou give us the list. We do the setup.How this works underneath
Training is delivered through usecure, and CyberGrape is a licensed usecure partner. Users are connected to the platform so records line up with your people.We run the campaignsSimulations and modules on a schedule.How this works underneath
Simulated phishing runs on a regular schedule with varied templates. Repeat clickers are given targeted training. We manage the campaigns and report on the results.Records flow into your proof packNo chasing screenshots.How this works underneath
Completion and results are tracked per person. They flow into the platform as dated for SMB1001 and are available for your proof pack.
A small example
What this can look like.
- Situation
- A client has asked whether staff are trained. The business has no records.
- What changes
- Staff are enrolled and a first phishing test runs. A handful click and are given short help.
- What happens next
- Modules and simulations continue on a schedule. New starters are enrolled automatically.
- What is kept
- Completion, results and policy sign-offs are kept per person with dates.
This is an invented example to show how the service works. The names and figures are not a real customer's.
What you get
What you get.
Simulated phishing
Realistic tests with reporting on clicks and who reports a suspicious email.
Short training modules
Covering phishing, passwords, social engineering and data handling.
Policy sign-off
Staff sign off your security policies, tracked and recorded.
A human risk score
So you can see who needs more support.
Training records
Per person, linked to your platform for evidence.
Onboarding for new starters
Enrolment that runs itself.
Questions
Common questions.
usecure, and CyberGrape is a licensed usecure partner. Records flow into the platform so they appear in your evidence.
On a regular schedule, with varied templates so your team is tested without getting used to one pattern. People who click are given targeted training.
Yes, from Bronze (control 5.1.0.0) to Diamond, with the requirements increasing at each tier.
Yes. Completion is tracked per person, so you can see who has finished each module and who has not started.
Other services
Also available.
Make your people part of your protection.
Start with the free readiness assessment. It shows you where you stand, and we will tell you which service, if any, makes sense.