Cybersecurity awareness & training

One session a year changes nothing: what counts is short repetition anchored in the working context. A rhythm that works combines one collective session a year, brief reminders along the way, and social engineering campaigns that put the subject back into a real situation. A new joiner and a change of role are the two moments when the message lands best — and the two most often missed.

Through behavioural indicators, not attendance figures. Social engineering campaigns give a before and after: click rate, credential-entry rate, and above all reporting rate — that is the one that rises when awareness is working. A larger number of tickets raised over a simple doubt is a good sign, not a nuisance: it shows employees know what to do with a suspicious message.

Yes. Executives are targeted specifically — CEO fraud, mailbox compromise, impersonation — through scenarios that have nothing in common with bulk phishing, and their decisions commit the organisation well beyond their own role. A short dedicated session framed around governance holds an attention a general module never will. The same reasoning applies to finance roles and executive assistants.