Security Awareness Training
Help Your Team Spot the Warning Signs
Technology stops most attacks, but people still receive the ones that get through. Our security awareness training gives staff short, regular lessons on recognising phishing, protecting their accounts and reporting concerns quickly.
What is Security Awareness Training?
Security awareness training helps your staff understand the everyday threats they face and what to do about them. Instead of one long annual session that is quickly forgotten, it uses short, regular modules that fit around work.
Topics cover situations people actually meet: suspicious emails and links, fake login pages, invoice and payment fraud, passwords and multi-factor authentication (MFA), safe file sharing, working away from the office and how to report something that doesn't look right.
Training is one layer of a wider approach. Phishing Simulations, which send safe, realistic test emails agreed with you in advance, are a separate service that works well alongside it.
Key benefits
- Staff better able to recognise phishing and payment fraud
- Short, regular modules that fit around the working day
- A culture where people report concerns quickly, without blame
- Completion reporting so you can see who has taken part
- Reinforces the technical protections you already have
How does it work?
We agree a training programme with you, enrol your staff and keep the training going on a regular schedule, with reporting so you can see progress.
Plan the programme
We agree the topics, how often training runs and who takes part, taking account of your sector, the systems you use and any recent concerns.
Enrol staff
We add your users and help you introduce the training, explaining why it matters and how to report suspicious emails.
Regular training
Staff complete short modules on a regular schedule, with reminders for anyone who falls behind.
Review and adjust
We share completion reports and review the programme with you, adding topics as threats change or new needs come up.
- Agreed programmeTopics, frequency and who takes part
- Short, regular modulesCompleted around the working day
- Concerns reportedStaff know what to look for and who to tell
- Review and refreshCompletion reports and updated topics
Typical topics
- Recognising phishing emails, text messages and phone calls
- Fake login pages, and why MFA matters
- Invoice fraud and requests to change supplier bank details
- Strong passwords, passphrases and password managers
- Sharing files safely in OneDrive, SharePoint and Teams
- Working securely from home, while travelling and on public Wi-Fi
- Handling personal data with care
- How and when to report a concern
Problems solved
Staff unsure what phishing looks like
Short, practical examples help people spot the warning signs in their own inbox.
Payment fraud attempts
Training covers how to check a request to change bank details by calling a known number rather than replying to the email.
Mistakes not reported
People who fear blame stay quiet. Training encourages prompt reporting, which gives you a better chance of containing a problem.
Annual training quickly forgotten
Regular, bite-sized modules keep security in mind throughout the year.
Customers asking about staff training
A regular programme with completion records gives you something concrete to point to.
What's included
Included as standard
- Agreed training programme and schedule
- Short, regular training modules for each enrolled user
- Enrolment of staff and new starters
- Completion reporting
- Periodic review of topics with you
Optional or scoped
Available on request and confirmed in your proposal; not part of the standard service.
- Phishing Simulations, as a separate service
- Additional modules for specific roles, such as finance or IT administrators
- Briefing sessions for your team, where agreed
What's not included
- Phishing simulations, which are a separate service
- Professional qualifications or accredited certification for staff
- General software training, such as how to use Microsoft 365 applications
- HR or disciplinary processes relating to training results
Training lowers the chance of people falling for an attack, but it doesn't remove it. It works best alongside email filtering, MFA and endpoint protection.
Results depend on staff taking part. Visible support from leadership and time set aside for training both help.
Who it's suitable for
- Businesses whose staff handle email, invoices or customer data
- Organisations with new starters who need a security induction
- Teams that work remotely or travel
- Businesses answering customer or insurer questions about staff training
- Organisations that have had a phishing scare and want to raise awareness
Pricing
This service is tailored to your business, so we confirm the price after a short conversation about your requirements. There is no charge for the conversation.
Use the quote builder to add Security Awareness Training to an indicative quote, or book a free security review and we'll recommend what fits.
Price
On Application
Tailored price on application, based on your users and the training programme we agree.
Included in the Advanced IT & Security plan (£35 per device per month).
What affects the price
- Number of users
- Training frequency
- Topics and any role-specific content
- Reporting requirements
- Whether phishing simulations are added as a separate service
All prices exclude VAT.
Add to Your QuoteFrequently asked questions
How much time will this take staff?
Modules are designed to be short, so they fit around work rather than taking people away from it for long. We agree how often training runs with you.
Are phishing simulations included?
No. Phishing Simulations are a separate service. Many businesses use both: training explains what to look for, and simulations show how people respond to realistic emails.
Will staff be singled out?
The aim is to build confidence, not to catch people out. Completion reports help you follow up supportively, and we recommend treating every report of a suspicious email as a positive, even when it turns out to be harmless.
Can new starters be added as they join?
Yes. Let us know when someone joins and we add them, so security becomes part of their induction. Leavers are removed from the programme.
Does training help with Cyber Essentials?
Cyber Essentials focuses on five technical controls, so staff training isn't one of its requirements. It does support those controls in practice, for example by helping staff understand why MFA and updates matter.
Let's Secure Your Business
Find out how Pulsar IT can help protect, manage and improve your IT environment.