Cybersecurity Awareness Training

Most security incidents do not begin with a broken firewall. They begin with a person — someone in a hurry who clicks a link, reuses a password, or sends a spreadsheet to the wrong address. Technology cannot close that gap on its own, which is why ISO/IEC 27001 requires awareness as a control in its own right.

This 1.5-hour course gives every employee, in any role, the small number of habits that stop the majority of real attacks. It is written in plain language, assumes no technical background, and uses situations people actually meet: an urgent email from a director, a password that has appeared in a breach, a laptop left in a taxi, a supplier asking for a change of bank details.

Each module is mapped to the relevant ISO/IEC 27001:2022 Annex A controls, so the training also serves as documented evidence of competence when your organisation is audited.

Who it is for

All staff and contractors. No prior knowledge required. Particularly useful as the annual refresher an ISMS requires, and as induction training for new joiners.

What you will be able to do

• Recognise phishing and social engineering before you act on it
• Build and manage passwords that survive a breach, and use MFA properly
• Handle company information according to how sensitive it actually is
• Work safely on laptops, phones and home networks
• Report a suspected incident quickly and without fear of blame