Skip to main content
Security awareness training

Security awareness training that makes your employees the first line of defence

Phishing targets people, not firewalls. With awareness training and phishing tests, your employees learn to recognise the attempts, and you can measure that it works.

Gruppe af kollegaer i samarbejde omkring en bærbar

Training content

Knowledge that becomes habit. The training covers network security, access control and risk management in your employees' everyday work.

Your employees learn to protect the company's data against external threats. The programme covers the areas attacks actually target: network security, access control and risk management. Everything is built around situations from a normal working day.

IT-sikkerheds-illustration

Six modules, one programme. From basic security principles to phishing simulations and workshops for management.

Practical courses from basic security principles to advanced cybersecurity techniques. You choose the modules that fit your company.

Basic IT security

Understand the risks, learn to recognise threats and build security habits that hold up in a busy working day.

Protection against digital threats

Tools for protection in practice: security protocols, vulnerabilities and data protection, explained so everyone can use them.

Network, access and risk

Training in network security, access control and risk management, with solutions every employee can follow.

From basic to advanced

Courses from basic security principles to advanced cybersecurity techniques, adapted to roles and prior knowledge.

Phishing simulations

Realistic test emails to your employees, and training programmes built on the results.

Leadership workshops

Separate sessions for management, so the security culture is anchored at the top.

MI Support IT-medarbejdere i samarbejde

Results

Training that changes behaviour. Click and reporting rates show the progress, and the programme is adjusted to the numbers.

Over time your organisation gets markedly better at spotting phishing and social engineering. You get reports on the progress, and we adjust the training to the results.

Phishing testing of employees. How a test programme works in five steps, from planning to repetition.

A phishing test of your employees shows how the organisation reacts to an attack, before the real one arrives. The test uses simulated phishing: realistic but harmless emails that mirror the attacks Danish businesses actually face. No data is put at risk, and no employee is singled out. A test programme always follows the same five steps:

Book a meeting
  1. 1

    Planning

    Scope, scenarios and timing are agreed with management. Employees are informed in general terms that the company runs tests, but not when.

  2. 2

    Simulated phishing campaign

    Test emails are sent in realistic scenarios: fake login pages, invoices, parcel deliveries or messages from management. Everything is controlled and harmless.

  3. 3

    Measurement

    Click rate, submitted credentials and reporting rate are measured, meaning how many reported the email to IT. The reporting rate is the number that matters most: It shows whether the culture is working.

  4. 4

    Follow-up training

    Employees who clicked receive short, practical training right away, while the experience is fresh. Results are treated confidentially and used for learning only.

  5. 5

    Repetition

    The effect comes from the rhythm. New scenarios, new colleagues and new threats mean the test is repeated at fixed intervals, so progress can be tracked over time.

Regular phishing tests every quarter is our recommendation: often enough to keep awareness sharp, rarely enough that the scenarios never become routine. After each round you receive a report with click rate, reporting rate and progress since the last test. It is broken down by department, exposes no individuals and ends with recommendations for the next step.

Pricing depends on the number of employees and campaigns per year. You get a fixed price based on scope, so there are no surprises along the way.

Awareness

Security awareness training. Short e-learning modules and workshops that make secure behaviour a habit.

Security awareness training for employees is ongoing training that makes secure behaviour a habit, not an annual tick-box exercise. Short e-learning modules are completed at each employee's own pace. Workshops for teams and management use your company's own systems and everyday situations as examples.

The topics cover what attackers actually exploit: phishing in all its variants, CEO fraud, strong passwords, MFA and secure use of email, mobile and cloud. The content is updated as new attack patterns emerge.

Impact is measured rather than assumed. Participation, test results and the development in click and reporting rates are tracked, so you can document progress to management and auditors alike.

The training is also a compliance requirement. NIS2 explicitly requires cybersecurity training of employees and management. Documented awareness training is one of the minimum measures regulators can ask about, and the documentation comes with the programme.

Møde mellem konsulenter og kunde

What you get. Reporting, content adapted to your industry and certificates for auditors.

Reporting

Hard numbers on progress and participation.

Adapted content

Training adapted to your industry and your employees' roles.

Certificates

Documentation for employees and auditors.

Next step

A training programme for your employees. Programme, delivery and measurement of impact, on an ongoing basis.

The programme is designed around your company's risk and roles. The training is delivered, the impact is measured, and the programme is adjusted to the numbers.

Book a meeting

FAQ

Questions about phishing testing and awareness training. How often, what it costs, and whether it is legal.

Every quarter as a starting point. Test less often and the effect fades, while new employees go too long without a test. Test much more often and the scenarios become routine. At elevated risk, for example after a real attack or many new hires, the frequency can be raised for a period.

The price of security awareness training for employees depends on the number of employees, the format (e-learning, workshops or both) and any phishing tests. You get a fixed price based on scope, typically a fixed amount per employee per year, so the cost is predictable. Write to us for a specific quote.
Yes, when set up correctly. Employers have a legitimate interest in training security behaviour, but the GDPR sets conditions: employees must be told that tests happen, results stay confidential and serve learning, not sanctions, and only necessary personal data is stored. Danish Data Protection Agency practice requires a legitimate purpose, proportionality and prior information. We design the tests accordingly.

Strengthen your first line of defence. Book a meeting, and we will design a programme that fits your company.