Skip to content

Service 06 · People

Cybersecurity Awareness Training

Awareness programmes built for measurable behaviour change — baseline, train, test with simulated phishing, and report the metrics.

Get a free security assessment All six services

The outcome

Your staff stop being the easiest way in

Headline deliverables: Training programme · Simulation results · Attendance evidence

The problem we solve

The problem we solve

The strongest technical controls are undone by a single click. With 95% of breaches involving human error and a third of employees unable to spot a phishing email, awareness isn’t a “nice to have” — it’s a control in its own right.

We build awareness programmes for measurable behaviour change, not box-ticking: baseline the real risk, design learning around it, train, test with simulated phishing, and report the metrics — so you can prove your people are getting safer.

95%

of cyber breaches involve human error

1 in 3

employees can't spot a phishing email

Problems this addresses

  • Staff cannot reliably recognise phishing or social engineering
  • Training is a once-a-year box-tick with no measurement
  • Staff do not understand their obligations under the Data Protection Act 2021

Our approach

Our 5-step training approach

  1. 1 Assess — Baseline Awareness Survey
  2. 2 Design — Custom Learning Plan
  3. 3 Train — Workshops & E-Learning
  4. 4 Test — Simulated Phishing Attacks
  5. 5 Report — Awareness Metrics Report

Deliverables

Training topics covered

  • Phishing & Social Engineering
  • Password Security & MFA
  • Data Classification & Handling
  • Incident Reporting Procedures
  • Safe Internet & BYOD Policies
  • Ransomware Awareness
  • Data Protection Act 2021 (Zambia)
  • Insider Threat Recognition

Outcomes

What you walk away with

  • 01Measurable reduction in phishing click-through and risky behaviour
  • 02A security-aware culture, evidenced with before/after metrics
  • 03Staff who understand their obligations under the Data Protection Act 2021

Engagement model

How the work runs

Every engagement moves through the same four stages, and each ends with a document you keep.

  1. Stage 01

    Posture review

    We review your current controls, policies and evidence against ISO 27001 and the directives that apply to you.

    Output: Gap summary

  2. Stage 02

    Scoped plan

    You receive a prioritised plan — what to fix, in what order, and who owns it — before any implementation is agreed.

    Output: Remediation roadmap

  3. Stage 03

    Implementation

    We implement alongside your team: policies, controls and tooling, with evidence gathered as we go.

    Output: Evidence pack

  4. Stage 04

    Validation

    Controls are tested and re-tested, and the result is reported to leadership in plain language.

    Output: Assurance report

Related service

Regulatory Compliance Advisory

Bank of Zambia directives and the Data Protection Act 2021, mapped to real controls.

View Regulatory Compliance

Start with a picture

Book the free security assessment

Forty-five minutes, no obligation — and a written, prioritised view of where you stand. We reply within 24 hours.

Book your assessment Take the 2-minute Readiness Check