01865 595510 Get a gap analysis

Managed Protect

Security awareness training and phishing simulation

Your email filters will miss something eventually. When they do, one of your people decides what happens next. We train them to make the right call.

Training
Monthlyshort modules, minutes not hours
Phishing tests
Monthlytailored to your business
Follow-up
Automaticfor anyone who clicks
Evidence
Reportsfor Cyber Essentials, ISO 27001 and insurers

01 / The problem

The filters catch most of it. Your people catch the rest.

Phishing still gets through

Attackers write convincing emails and register lookalike domains. Some will reach an inbox, however good your filtering is.

Annual training fades

An hour of slides once a year is forgotten by spring. Habits change through short, regular practice.

Auditors and insurers ask for proof

ISO 27001 and many cyber insurance policies expect awareness training. They also want evidence that it happened.

02 / What’s included

Training, testing and the evidence to show for it.

Training

Short training modules

Monthly lessons on phishing, passwords, social engineering, data handling and mobile devices. Each one takes a few minutes.

Testing

Phishing simulations

Realistic test emails built around the attacks your sector sees, including fake versions of your own suppliers and systems.

Remediation

Follow-up training

Anyone who clicks a test gets a short lesson on what they missed, straight away. No naming and shaming.

Reporting

Risk scores and reports

Completion rates, click rates and risk scores by person and team, tracked month on month.

Governance

Policy templates

Acceptable use, password, email and remote working policies to adapt and adopt.

Add-on

Dark web credential alerts

We look for staff credentials in breach dumps, so you can force a reset before they're used.

[Placeholder: offer for this service, written by ITB]

03 / How it works

From first test to lasting habits.

  1. Baseline We run a first phishing test to see where you stand today.
  2. Set up We load your users, agree the schedule and pick content that fits your business.
  3. Run monthly Training and phishing tests go out each month, with follow-up for anyone who clicks.
  4. Report and adjust You get a monthly report, and we change the campaigns as your people improve.

Blaming people for clicking doesn't work. Giving them practice does.

How ITB runs awareness training

04 / Why ITB

Training people actually finish.

We run the whole programme, from platform to reports. You don't have to schedule a campaign or chase a completion rate.

  • Fully managed: Platform set-up, campaign scheduling, content choice and reporting are all ours.
  • Tailored tests: Simulations based on your sector and suppliers, not stock templates staff spot at once.
  • Measurable: Risk scores tracked over time give leadership a clear picture of progress.
  • Joined up: We also run email security, so tests reflect what's really reaching your inboxes.

· 05 / Questions

Awareness training, plainly answered.

Q01 How often do training and phishing tests run?

Usually once a month each. We can change the frequency to suit you. Short and regular beats long and annual.

Q02 Can you tailor the phishing tests to us?

Yes. We build scenarios around the attacks your sector sees, including fake emails from your own brand and suppliers.

Q03 What happens when someone clicks a test?

They get a short training module on the thing they missed, straight away. Results are for you and us, not for public league tables.

Q04 Do Cyber Essentials or ISO 27001 need this?

ISO 27001 expects awareness training, and many cyber insurance policies ask for evidence of it. Our reports give you that evidence.

Q05 Will it annoy our staff?

Modules take minutes, not hours, and tests are spaced out. Most people find it more useful than an annual slideshow.

Related services

Protect

Email & Collaboration

Stops most phishing before your people ever see it.

See the service
Assess & assure

Cyber Essentials & IASME

Certification that awareness training supports.

See the service
Assess & assure

Compliance: ISO 27001 & CAF

Our reports help evidence the awareness controls.

See the service
Detect, respond, recover

Managed SIEM / SOC

Catches what happens if a real phish is clicked.

See the service

· [Placeholder]

[Placeholder] [Placeholder]

[Placeholder: written by ITB]

User Awareness & Phishing enquiry
We’ll only use this to reply. Privacy