What exactly is included in the Security Awareness programme? +
The programme combines short employee training sessions, realistic phishing simulations, targeted follow-up and reporting. SpySecure handles the setup, planning and delivery of the programme.
How often do employees receive training? +
Training is delivered throughout the year in short modules. This keeps cybersecurity front of mind without burdening employees with lengthy training sessions.
Does every employee receive the same programme? +
No. Training and follow-up are tailored to each employee’s role, risk and previous results. Finance employees may, for example, receive additional training on BEC and invoice fraud, while employees in other roles receive different relevant topics.
How do the phishing simulations work? +
Employees receive controlled test emails that simulate realistic phishing attacks. We measure, for example, whether an employee recognises the email, clicks a link or enters information. The results are used for targeted training and follow-up.
What happens if an employee fails a training module or clicks a phishing link? +
The results are used to adjust the programme. Employees may receive additional or repeat training on topics that require extra attention.
How are new employees included? +
New employees are added to the programme and receive the relevant introductory training. They then join the regular training and phishing programme.
Which reports do we receive? +
You receive insight into participation, completed and outstanding training modules, results and phishing simulations. This shows you where extra attention is needed and allows you to demonstrate to management that the programme is being carried out on an ongoing basis.
Does this help with NIS2, ISO 27001 and audits? +
Yes. Ongoing security awareness and demonstrable employee training are relevant to frameworks and regulations including NIS2 and ISO 27001. The reports help demonstrate that training takes place and that results are followed up.
What does SpySecure manage and what does our organisation handle? +
SpySecure manages the training programme, campaigns, phishing simulations, follow-up and reporting. Your organisation ensures that the correct employees are enrolled and informs us when employees join, leave or change roles.