Our experience with conducting cybersecurity training confirms the research in educational psychology. The effectiveness of protection relies on periodically placing employees in simulated environments where they can practice the techniques they have learned. Therefore, we send harmless versions of fraudulent emails to employees every month. These emails may contain a combination of links, attachments, and/or QR codes. Opening the link or attachment is recorded, allowing company management to receive detailed information about each deceived employee. Additionally, our pen-test scenarios are tailored to current local events, challenging employees and closely simulating modern, AI-assisted techniques used by cybercriminals.

*Example simulation for illustrative purposes.

The process of refreshing employees’ cybersecurity knowledge includes micro-training accompanying each phishing simulation. Deceived employees are redirected to a portal where they can see exactly what they should have noticed in the specific phishing email simulation. They can watch a short video reminding them how to identify email scams, review a few training slides, and answer some questions on the topic. Each of these steps is recorded and included in the monthly cybersecurity training report.

Participation in the cybersecurity training program provides not only protection against phishing and general attempts at breaches through social engineering, but also enables company management to have a real-time view of current preparedness and to target weaknesses in their defenses. These weaknesses can often include specific employees, departments, or particular groups of scenarios and phishing techniques.

Detailed monthly reports contain information on training progress, phishing simulations and deceived employees, the social engineering techniques used, results from the primary cybersecurity training tests, follow-up micro-trainings, successfully recognized simulations by employees, and more. The provided data is broken down by employee, department, geographical distribution, and other relevant factors.

The specially developed module for Outlook allows employees to report a suspected phishing email to their system administrators with a single click. Unlike conventional notification methods, this approach significantly increases the number of reported incidents, making employees active participants in the protection process. System administrators receive the report in the correct format, with all necessary headers and attributes, enabling them to quickly warn employees or directly remove the phishing email from users’ inboxes before any damage occurs to the company.

If an employee attempts to report a phishing simulation that is part of the cybersecurity training, they receive a notification confirming the successful identification of the simulation, and this successful recognition is recorded and included in the monthly report.

Another feature is a colored warning bar that alerts employees to exercise caution when receiving emails from unknown senders and domains. The bar is integrated into Outlook rather than the email itself, ensuring it does not remain when replying to or forwarding the email, making the warning method significantly more discreet. The color scheme of the bar changes periodically, preventing employees from becoming too accustomed to the warning.

Our monthly cybersecurity newsletters contain information on current threats and fraudulent phishing emails circulating in the relevant region. Additionally, we include interesting techniques used by hackers for social engineering and system breaches. The information is compiled based on voluntarily submitted reports from our partners and clients, as well as various decoys set up in cyberspace.

The monthly newsletters are part of the cybersecurity training and can be sent to system administrators or all employees. This process adds an additional layer of protection for the company against phishing and other cyber threats.

Starting the training is quick and easy. Our service is managed and cloud-based. All you need to do is provide us with:

• the email addresses of your employees;
• The email addresses of administrators for simulation approval and report receipt;
• A password to secure communication between you and us;
• Permission for your systems to receive our emails.

All information shared with us is transmitted through a pre-established, encrypted channel to prevent any risks to your data.