Phishing: the reflexes
Recognize a booby-trapped email, check a sender, don't click, report.
10 minBeginner
Cybersecurity · Awareness
Raise employee awareness, not just your defenses.
A firewall stops technical attacks. It does not stop a click. This path works on the six situations where an employee decides alone, in a few seconds, with nobody to ask.
- From €19 per module — see pricing
- 6 modules, 10 to 20 min, taken at the workstation
- Auditable certificate, filed in the training record
Why awareness matters
One classroom session a year does not last a year.
Most companies have already done something: a meeting, a slide deck, a poster in the break room. Then an email lands on a Thursday at 5 p.m., it looks like the one from accounting, it asks for an urgent transfer — and nothing said six months earlier comes back to the surface.
Cybersecurity awareness that works does not try to make experts. It installs reflexes on a small number of concrete situations: a sender worth checking, a password not to reuse, a USB stick found in a parking lot, a screen left unlocked, personal data sent to the wrong recipient.
And because the risk is not the same everywhere, the path goes down to the industrial environment: production workstations, removable media, access to PLCs. On that floor a USB stick is not the same problem as it is at head office.
No longer just good practice
Regulatory reference
A data breach, and the 72-hour deadline.
A personal data breach is a security failure leading to the destruction, loss, alteration or unauthorized disclosure of data. It takes three forms, and the company has 72 hours to notify it.
| Form | What is affected | Everyday example |
|---|---|---|
| Breach of confidentiality | Data is seen by someone who should not see it. | A client file sent to the wrong recipient. |
| Breach of integrity | Data is altered without authorization. | A record tampered with after an intrusion. |
| Breach of availability | Data becomes inaccessible or is lost. | Ransomware encrypting a server. |
Source: Regulation (EU) 2016/679, article 4(12) for the definition, and article 33 for notification to the supervisory authority within 72 hours of becoming aware of it.
The path
Six situations, six modules.
About an hour and a half in total, in one sitting or spread out. Each module stands alone and can be assigned separately.
Passwords & authentication
Strong passwords, password manager, multi-factor authentication (MFA), good habits.
12 minBeginner
Data protection: the fundamentals for employees
Personal data, purpose, retention period, individual rights: the essentials.
18 minBeginner
Handling a data breach
Detect, qualify and report a breach: what to do and the key deadlines.
15 minIntermediate
Cybersecurity in industrial environments
Production workstations, removable media, access to PLCs: the OT risks.
20 minAdvanced
Mobility, remote work & on-the-go devices
Public Wi-Fi, session locking, screen privacy, external media.
12 minBeginner
FAQ
Your questions on awareness training.
What comes up most often before a rollout.
Everyone, regardless of seniority or role. Phishing attacks do not target IT: they target accounting, HR, management and assistants — the people who receive attachments and who release payments.
At least once a year, and whenever someone joins. Ten- to twenty-minute modules make that rhythm sustainable, where a half-day classroom session ends up being postponed.
About an hour and a half for the full path. Since each module stands alone, you can also assign only the first three company-wide and reserve the industrial module for production teams.
The directive expects management bodies to be trained and teams to receive regular awareness training, without imposing a format. A path that is completed, dated and certified per person is the evidence you will be asked for. We do not issue NIS 2 certification: we provide the training and its traceability.
Yes, through SCORM or xAPI, with results and history reported back. If you do not have an LMS, the paths work as is and the certificate stays auditable.
Keep going
Neighboring topics.
Reach every employee.
The full catalog, with durations, levels and pricing.