Cyber and Information Security Training

Most security incidents start with a person, not a piece of technology: a convincing email, a rushed payment, a shared password, a file sent to the wrong place. Good training changes those everyday decisions.

Our sessions are built around the role. A finance assistant, a marketing manager and a director face different threats and make different decisions, so they need different training. Everything can be delivered remotely or in person, in plain English, with practical actions people can use the same day.

Staff awareness

For everyone in the organisation.

Recognising phishing, smishing and phone scams
Passwords, passkeys and multi-factor authentication
Handling information safely: email, sharing links, cloud storage and printing
Working securely from home and on the move
Safe use of AI tools at work
What to report, how, and why it matters

Managers and business owners

Understand cyber and information risk as a business risk.

What information your business holds and why attackers want it
How a cyber incident affects cash flow, contracts, customers and reputation
Your legal and regulatory responsibilities for personal data
Supplier and third-party risk
Setting priorities and asking the right questions of IT
Leading the response when something goes wrong

IT teams and MSPs

Turn good intentions into secure everyday practice.

Current attack techniques and how they get in
Identity, privileged access and admin account hygiene
Patch and vulnerability management that keeps pace
Logging, detection and incident handling basics
Your responsibilities when you manage other people’s systems

Marketing teams

Protect the brand, the accounts and the data.

Securing social media, CMS and marketing platform accounts
Spotting brand impersonation and fake accounts
Customer data, consent and third-party marketing tools
Phishing and deepfakes that target marketing teams

HR and people teams

Secure the people processes attackers target.

Joiners, movers and leavers: granting and removing access properly
Payroll diversion and fake supplier fraud
Recruitment scams and malicious CVs
Handling employee personal data safely
Building a reporting culture, not a blame culture

How it works

Live sessions, remote or in person, of 60 to 120 minutes, tailored to your organisation
Tabletop exercises: walk your leadership team through a realistic incident
Workshops for IT teams and MSPs
Follow-up pack: slides, a one-page checklist and attendance records