Workplace & institutional
One session a year does not change behaviour. Twelve months of small nudges does.
The kickoff is a half day of real phishing emails, real vendor-fraud calls and a live demonstration of what an attacker sees after one click. After that, we send simulated phishing every quarter, train the people who click with a two-minute lesson, and give you a report that shows the click rate going down.
- Duration
- Half day + quarterly simulations
- Format
- Online / Onsite
- Language
- Hindi / English
- Level
- Beginner
- Group size
- 25 to 2,000 (sessions in batches of up to 100)
- Certificate
- Completion certificate per employee at the end of the annual cycle
- For
- All staff
What participants can do afterwards
- Staff can recognise phishing, vishing and WhatsApp impersonation of the CEO or a vendor, and know the one-line check for each
- Staff know how to report a suspicious email or call, and that reporting a click early is rewarded, not punished
- Password managers and MFA are set up on work accounts; the "same password everywhere" habit is broken
- Finance, HR and admin know the specific scams aimed at them (invoice change, payroll diversion, gift-card requests)
- Leadership has a click-rate and report-rate trend across four quarters, and evidence for auditors, insurers and CERT-In-driven policies
Modules
Kickoff: what an attack looks like from the inside
A live demonstration of a phishing click, credential theft and mailbox rules, using a sandbox copy of a typical Indian office set-up.
Kickoff: the five scams aimed at staff
Phishing, CEO fraud on WhatsApp, vendor invoice change, fake IT support call, malicious attachment. Real examples, localised.
Kickoff: habits, done live
MFA, password manager, reporting button, screen lock, personal-device rules. Done on the employee's own machine and phone.
Quarterly phishing simulations
Four campaigns a year of increasing difficulty, agreed with you in advance. Clickers get a two-minute lesson, not an email to their manager.
Role-specific refreshers
Twenty-minute online sessions for finance, HR, admin and IT on the scams that target each.
Reporting and renewal
A quarterly dashboard and an annual report for the board, auditors and insurers, with a plan for the next cycle.
Who should attend
- Organisations of 25 to a few thousand staff that need annual awareness training for policy, audit or insurance reasons
- Companies that have had a phishing or BEC incident and want behaviour, not a certificate
- NBFCs, hospitals, schools, IT services firms and manufacturers with distributed staff
- Groups with a mix of desk and non-desk staff who need Hindi delivery
Included
- Half-day kickoff sessions in batches, online or at your sites
- Four phishing simulation campaigns per year with a reporting dashboard
- Short role-specific refreshers for finance, HR, admin and IT
- Posters, a one-page policy summary and a Hindi/English handout
- Annual report and completion certificates per employee
Frequently asked questions
Will phishing simulations upset staff or create a blame culture?
Only if they are run as a trap. We agree the campaigns with you in advance, tell staff at the kickoff that simulations will happen, never name clickers to managers, and reward early reporting. The metric that matters is how fast the first report arrives, not who clicked. Run this way, staff treat the simulations as a game and the report rate climbs.
Do you need access to our email system?
For simulations, we need an allow-listing entry in your email gateway so the test messages are delivered, and a list of employee addresses. We do not need admin access to your mailboxes. Results are reported in aggregate, with individual data retained only to assign the two-minute lesson and deleted at the end of the cycle unless you ask otherwise.
Can the kickoff be delivered in Hindi for factory and field staff?
Yes. Non-desk staff get a shorter kickoff focused on WhatsApp impersonation, UPI fraud, SIM and phone hygiene, and reporting, in Hindi, at the plant or warehouse. Simulations for staff without email can be run on WhatsApp with your agreement. Desk staff get the full half day in English or mixed.
Does this satisfy our auditor, insurer or ISO 27001 requirement?
The programme produces what those reviews ask for: an attendance record, a completion certificate per employee, a quarterly simulation report and an annual summary with trends. We do not claim any accreditation, and whether it satisfies a specific control is for your auditor to decide, but the records are designed to be handed over as they are.
What does it cost?
Priced per employee per year, with the kickoff, simulations, refreshers and reporting included, and a lower rate above a few hundred staff. Onsite kickoffs at multiple locations are priced by the day. Ask for a quote with your headcount, locations and whether you need Hindi delivery for non-desk staff.
Request this program
Tell us the audience, headcount, city and preferred dates. We reply with an outline and quote.