What the programme includes
A programme people finish, and evidence you can hand over. Both matter.
Short modular courses
Five to ten minute modules on one behaviour each, which is what fits into a working day and actually gets completed.
Role and risk-based assignment
Finance, executives, developers and contractors get different content, because they are attacked differently.
Arabic and English content
Delivered in the language your staff work in, so comprehension is not the variable you are testing.
Policy attestation
Acceptable use, data handling and clear desk policies acknowledged and recorded per user, with version history.
Human risk scoring
Training, simulation and reporting behaviour combined into a per-user score, tracked over time.
Reporting button
A one-click report button in the mail client, so suspicious messages reach your analysts instead of a colleague.
Onboarding and annual cycles
New joiners enrolled automatically, refreshers scheduled, leavers removed. No manual list keeping.
Reminders and escalation
Automated nudges, then manager escalation for the people who ignore them, without you having to chase.
Board-level reporting
Departmental comparison and trend over time, in a format a steering committee reads in two minutes.
From an unmeasured workforce to a measurable reduction in risk
Training without a baseline cannot be shown to have worked. Start by measuring.
You run the platform
We deploy and configure it, build the content plan and hand it over with your team trained to run the cycle.
We run the programme
We own the schedule, the simulations, the escalation and the quarterly report. You get outcomes, not administration.
Controls that work alongside it
Phishing simulation
Behaviour under a realistic lure is the only honest measure of awareness.
Email security
Gateway reporting tells you which lures reach your people and who they target.
Governance and compliance
Training records are a control. Auditors ask for them by name.