Cybersecurity services
Assessments, endpoint protection, email security, training, incident readiness, and 24/7 monitoring for managed-service clients.
Cybersecurity
Cybersecurity awareness training
Most attacks still need someone to click, open or approve. Our training fits your organisation: short lessons, realistic phishing simulations and role-based sessions, with reports that show whether behaviour is changing.
Who this service is for
A good fit if
- Staff have fallen, or nearly fell, for phishing or invoice fraud.
- Your cyber insurer, clients or regulator expect regular security training.
- Training today is a once-a-year video nobody remembers.
- You handle personal, health or financial data, and key roles face targeted attacks.
What is included
- Baseline phishing simulation and short knowledge survey
- Plan: onboarding, regular short lessons, annual refreshers
- Training platform chosen and configured, or yours set up properly
- Realistic, fair phishing simulations at an agreed frequency
- Role sessions: finance fraud, leader impersonation, admin privileged access
- Easy reporting method, short policy guidance and progress reports
What this service is
A programme, not an event: staff learn to spot phishing, fake invoices, impersonated executives and malicious attachments, report them fast and keep safe habits. Short lessons, regular simulations and live sessions for high-risk roles beat one annual course; new staff get onboarding in their first weeks, before they learn what looks normal. A separate platform is not always needed: some Microsoft 365 plans include attack simulation training, dedicated platforms have larger libraries, and we compare what you have with what you need.
Security specialists are hard to hire, so upskilling your people closes the gap: everyone who pauses, phones to check a payment request or reports an odd email joins your defence. The Nigeria Data Protection Act 2023 expects appropriate technical and organisational measures to protect personal data, and staff who understand confidentiality are part of that. Insurers and many client contracts ask about regular training.
What staff learn
Spotting phishing
Messages posing as colleagues, suppliers, banks or Microsoft.
Payment fraud
How invoice fraud works; bank account changes verified by phone on a known number.
Passwords and MFA
Strong passwords, and unexpected MFA prompts or one-time codes refused and reported.
Handling information
Personal and confidential data in email, shared drives and on paper.
Remote work
Safe habits for remote and hybrid work, public Wi-Fi and personal devices.
After a mistake
Report it immediately, without fear of blame.
| Role-based session | Focus |
|---|---|
| Finance and accounts payable | Invoice fraud, supplier impersonation, payment verification |
| Executives and assistants | Impersonation, urgent requests, gift card or airtime scams |
| IT administrators | Privileged access, MFA fatigue attacks, helpdesk social engineering |
| Staff handling health or client records | Data protection obligations and safe sharing |
Measuring whether it works
Completion rates say little about behaviour, so we track measures that do:
| Measure | What it shows |
|---|---|
| Reporting rate | Rising reports: the clearest sign it works |
| Click rate over time | Fewer clicks, especially on harder scenarios |
| Repeat clicks | Who needs extra, private support |
| Time to first report | How fast the alarm is raised, vital in a real attack |
Leadership sees team trends; individual results get the discretion agreed at the start. Training covers the gap between email security, which blocks many attacks, and EDR, which catches what gets through (all cybersecurity services).
Delivery
How the work is delivered
Baseline
First simulation and survey, plus a review of past incidents and near misses.
Output: Baseline results, priority topics.
Plan
Topics, frequency, roles and result sharing, agreed with leadership and HR.
Output: Training plan, staff announcement.
Launch
Platform configured, staff enrolled, reporting button or address published, lessons begun.
Output: Live programme, staff guidance.
Simulate and teach
Regular simulations, a short lesson straight after any click, and role-based sessions.
Output: Results, session records.
Review
Progress reported, topics adjusted to new threats and results, leadership briefed.
Output: Reports, updated plan.
Scope at a glance
Not included unless agreed
- Platform licences, billed separately or bought directly; custom video unless agreed
- HR decisions or disciplinary processes
- Legal training on data protection obligations, which comes from counsel
What we need from you
- A current staff list with departments and roles
- Leadership and HR approval before simulations start
- Email admin help with filters, and a named contact for reports
Before handover
- Simulations pre-approved; never layoffs, medical results or similar sensitive lures
- Every click brings a short, respectful lesson; every report is acknowledged
- Results by team and trend; training records kept for insurers, clients, auditors
What affects the cost
- Staff enrolled, role-based and live sessions
- Platform and licence tier
- Live sessions online or on-site, and locations
- Reporting and record-keeping needs
No package prices: estimates in naira from an agreed scope, taxes shown separately.
Questions buyers usually ask
How often should we run phishing simulations?
Monthly or quarterly for most organisations: frequent, lower-stakes simulations build habits better than one large annual test. We agree the frequency with you.
Does training work for staff who mostly use their phones?
Yes. Lessons are short and work in a mobile browser, and cover scams arriving by SMS and messaging apps as well as email. Where staff read work email on personal phones, we show how to spot fake links on a small screen.
Will staff feel tricked?
Not if it is introduced openly and handled respectfully. Staff know simulations will happen, the focus is reporting, not blame, and results are shared by team.
Does training satisfy our insurer or regulator?
It often forms part of what they expect, and we keep records you can show them. Whether it meets a specific requirement depends on your policy's or rule's wording, which you should confirm.
Related
Security awareness training that changes behaviour
How to design awareness training people act on: 12-month plan, fair simulations, useful measures.
Email security
Protect mailboxes and your domain from phishing, impersonation and invoice fraud, with filtering, authentication and reporting.
Would your team spot a convincing scam?
Tell us how many people you have and what training exists today. We will arrange a conversation about a programme that fits.