Protect · Cybersecurity

Train your people to spot and stop attacks

Most successful attacks start with a person being tricked: a convincing email, a fake payment request, a call from “the bank”. Our training helps staff recognise these tricks, respond safely and report them quickly, without fear or jargon.

The problem we solve

Technology alone cannot stop a convincing lie

Filters catch a lot, but attackers adapt quickly: new bank details from a “supplier”, a message from the “managing director” asking for an urgent transfer, a sign-in page that looks exactly like your email.

Staff who know the signs, and feel safe reporting mistakes, are one of the strongest defences an organisation has. We build that habit with short, practical sessions and realistic practice.

What you get

Training that fits the threats you face

Live and online sessions

Engaging sessions for all staff, in person or online, using examples of the scams African organisations actually see.

Phishing simulations

Safe, realistic practice emails that teach in the moment, with results reported by team rather than used to shame individuals.

Payment fraud

Focused training for finance and procurement on invoice fraud, changed bank details and impersonation of senior staff.

Phone, SMS and WhatsApp scams

How social engineering works beyond email: SIM swap, fake support calls, stolen one-time passcodes and hijacked messaging accounts.

Role-based modules

Extra depth for leaders, HR, IT and anyone with access to money or sensitive data.

Records and reporting

Attendance, completion and simulation results you can show your board, auditors or regulators.

What staff learn

Practical habits, not a lecture

Every session ends with a few clear behaviours people can remember under pressure.

  • Check before you act: confirm payment changes and urgent requests through a separate, known contact
  • Never share one-time passcodes, PINs or passwords, whoever asks
  • Report quickly, even if you have already clicked
  • Use multi-factor sign-in and a password manager
  • Lock devices and take care on public Wi-Fi
  • Handle personal data carefully, as the NDPA requires

How it works

A programme, not a one-off talk

  1. Baseline

    An optional first phishing simulation and a short survey show where you are starting from.

  2. Train

    Sessions for all staff, plus focused modules for finance, leadership and other high-risk roles.

  3. Practise

    Simulations through the year at a sensible pace, with instant guidance when someone clicks.

  4. Report and refresh

    Results by team, trends over time, and refreshers for new starters and new scams.

We run phishing simulations only with written authorisation from your organisation, agree the scope in advance and never collect real passwords. Results are used to help people learn, not to discipline them.

Is this right for you?

Who this service is for

A good fit if

  • Your staff handle payments, customer data or confidential information
  • You have had a near miss, or want to prevent the first one
  • Your regulator, auditors or clients ask about security awareness

Questions

Frequently asked questions

How long are the sessions?

Core sessions run for about an hour, and modules for specific roles are shorter. We fit the format to your schedule, including sessions split across shifts or branches.

Can you train staff in different locations?

Yes. Online sessions reach everyone, and we can run in-person sessions where that suits your team better.

Are phishing simulations safe?

Yes. They are agreed with you in writing beforehand, run on a controlled platform and collect no real passwords. Staff who click see a short explanation of what they missed.

Will this help with compliance?

Training and its records support what auditors and regulators expect from organisations that handle personal or financial data, including the security duties in the NDPA and sector frameworks. Training alone does not make an organisation compliant, so we will also tell you what else matters.

What records do we get?

Attendance and completion records for each participant, simulation results by team, and a summary report for management.

Tell us what you need

Share a few details and we will reply by email with questions, next steps and, where it helps, a short call.