A prepared team is the first line of defence.

Most incidents start with a click. We train your team on real cases, at their level and in your sector, so they spot the trick before falling for it. And if you want, we test it with a simulation.

01 — What we offer

Three formats, one goal: nobody pays the fake invoice.

Awareness sessions

Two hours, in person or online, for the whole team: phishing, passwords, the phone, the spoofed supplier and the “boss” asking for an urgent transfer. With examples from your sector.

Incident simulations

A morning with management and team leads: “our servers got encrypted today” or “someone paid a fake invoice”. Who decides, who calls whom, what to tell clients. No panic on the day it happens.

Technical training

For your IT team, in-house or external: how attackers work, how misconfigurations are found and how to read and prioritise a Guard report.

02 · How we do it

Real cases, your sector, your tools.

01 · Adapted to your team. We get in touch with the team that will be trained and ask what worries them.

02 · We prepare the session. With real cases, adapted to your sector.

03 · Session, materials and measurement. A short survey before and after, materials to review and, if you ask, a phishing simulation agreed in writing and explained to everyone afterwards.

03 — Compliance

Training your team is also compliance.

The main cybersecurity standards require, in writing, that staff be trained and aware. Our sessions give you the evidence.

ENS · Spain's National Security Framework

Royal Decree 311/2022 requires staff to be trained and informed of their security duties (art. 15) and lists awareness and training among the minimum measures (mp.per.3 and mp.per.4), from the basic category up. It applies to public bodies and to the companies that serve them.

ISO/IEC 27001:2022

The standard requires people in the organisation to know the security policy and their part in it (clause 7.3) and has a dedicated control for awareness, education and training (A.6.3). The auditor asks for evidence: attendees, contents and frequency.

NIS2

Directive (EU) 2022/2555 requires management to follow cybersecurity training and calls for similar training to be offered to staff (art. 20.2), and lists basic cyber hygiene and cybersecurity training among the mandatory risk-management measures (art. 21.2.g). In Spain, the transposing law has not yet been passed.

GDPR

The General Data Protection Regulation lists awareness-raising and training of staff who process data among the data protection officer's tasks (art. 39.1.b), and it is one way to show the accountability required by articles 24 and 32.

After every session we hand you the record: attendees, contents and the before-and-after survey. It is what an auditor will ask for.

Included in Guard

One awareness session a year for the team.

If you have Guard, team training is included. We build it from what we saw in your company's tests: there is no more real example.

See Guard

For freelancers and creators

The Hardening guides, in your space.

If you are a one-person business, you do not need a session: you need a clear guide to harden WhatsApp, email, social networks and your password manager. It is in Radar, step by step.

See the monitoring

“How long does it take?”

From two hours to a full day, depending on the format. We adapt it to your team and their schedule.

“In person or online?”

Both; we adapt to you.

“Do you run phishing simulations?”

Yes, agreed in writing with management and, where there is one, with staff representatives. The goal is to train, not to catch anyone out.

Tell us about your case and we will propose a programme.

Awareness, from a teaching perspective.

Ask for information