Staff security training and phishing tests
Your team is the part of your security that thinks. Give them a fair chance and they will catch the things that get past the filters.
Every business has spam filtering. Some things always get through, because a well written phishing email does not contain anything a filter can object to. No attachment, no dodgy link, just a plausible message from a name you recognise asking you to do something ordinary.
That is why the last line of defence is a person.
Why annual training does not work
Security training that happens once a year is forgotten by February. The information is not hard, it is just easy to lose under everything else going on.
Short monthly training keeps it near the surface. A realistic test every so often turns it from theory into a memory. People who have seen a convincing fake invoice in a safe test are far more likely to pause at a real one.
What you get to show for it
A one page monthly report, signed policies, and a training record for each person. That is usually what an insurer, an auditor or a larger customer wants to see.
What is included
What you get
Bite-sized training
A few minutes a month, not a half-day course once a year. Short and regular is what actually changes behaviour.
Phishing simulations
Realistic test emails sent to your team, based on the scams actually going round rather than obvious fakes.
Instant coaching
Anyone who clicks gets a short explanation of what they missed, straight away. Not a telling-off and not a name on a list.
Clear monthly reporting
One page. Who has done the training, how the team did on the test, and where a quiet word would help.
New starter onboarding
New people get the training as they join, rather than waiting for the next cycle.
How we work
What working with us looks like
- 1
Free baseline test
A first phishing simulation before any training, so you know where you are starting from.
- 2
Set up
We add your team, set the schedule and get your policies loaded. It takes very little of your time.
- 3
Monthly training
Short modules go out automatically. Anyone who misses one gets a reminder, not a summons.
- 4
Monthly report
You get the one-pager. We talk through anything worth acting on.
Free, no obligation
Free baseline phishing test
Find out how your team does before you spend anything on training. You get the results and a short call to go through them.
Common questions
Will staff feel like they are being caught out?
Only if it is handled badly. We frame it as a team score rather than a list of names, and anyone who clicks gets coaching rather than a telling-off. If people are afraid of being blamed they hide mistakes, which is far more dangerous than a click.
How often do you send test emails?
Regularly enough to stay sharp and not so often that people stop reading their email properly. We agree the frequency with you.
Is this the same as human risk management?
Yes. Human risk management is the wider term for training, simulations, policy management and reporting, and it is what this covers.
What if someone keeps clicking?
The reporting shows you, and the fix is usually a short conversation and some targeted training rather than a disciplinary process.
Get in touch
Tell us what is not working
Send us a line about your setup and we will come back with what we would actually do about it. No sales pitch, no obligation.
Or call 01482 586 550 or email [email protected].
This form is provided by Growably. See our privacy policy.
Want a straight answer about your IT?
Tell us what is not working. We will tell you what we would do about it, with no sales pitch and no obligation.