Your staff, your best protection.
A fake email, a fake invoice, a fake technician: most cyberattacks on SMEs start with an employee caught off guard. We teach your teams to recognise these traps and respond the right way.
Arrange a training sessionWhy train your staff?
Antivirus software and email filtering stop most attacks. They do not block a carefully crafted message that uses your supplier's name, your accountant's first name and the amount of an expected invoice. Attackers know this: they target people rather than machines. A single click can halt your business for days, expose your clients' data and make you liable.
The most common traps
Phishing
A fake Microsoft 365, bank or parcel message leads to an imitation login page designed to steal your credentials.
CEO fraud
An urgent, confidential email that appears to come from management asks for an exceptional transfer outside the usual procedure.
Fake invoice
A supplier whose mailbox has been hacked announces a change of bank details on a perfectly genuine invoice.
Fake tech support
A so-called technician calls and asks you to install a remote access tool or read out a code.
Malicious QR code
A QR code in an email or a letter leads to a fake page, out of reach of the usual filters.
Reused passwords
A password already exposed in a data breach opens every account where it has been reused.
Article 8 of the new Federal Act on Data Protection (nFADP) requires appropriate technical and organisational measures to protect personal data. Staff awareness is one of them, and a documented approach lets you prove it.
Our formats
A one-off session is quickly forgotten. We combine formats according to the size of your team and your starting point.
Awareness workshop
The starting point for a team that has never covered the subject, or for refreshing good habits. Open to everyone, with no technical background needed.
- Remotely on Teams or at your premises
- Phishing and social engineering
- Passwords and two-factor authentication
- What to do, and who to alert, when in doubt
Phishing simulation
Realistic fake emails, sent without warning, to measure your teams' real vigilance and focus training where it matters.
- Scenarios based on common attacks
- Tracking of clicks and credentials entered
- Results report and recommendations
- One-off or recurring campaigns during the year
Tailored training
A programme built with you for a specific need: an industry, an exposed role or the arrival of new staff.
- Modules for medical practices, law firms and SMEs
- Session for management and finance
- Onboarding for new staff
- Content and duration agreed together
What training changes
Reflexes, not just knowledge
Concrete examples and regular exercises teach people to spot a suspicious message in seconds.
Faster alerts
An employee who reports a doubt or a mistake straight away helps limit the damage. Training builds this habit, without blame.
A documented approach
Every session and campaign is recorded, making it easier to meet nFADP requirements and security audits.
What we offer
We build a programme that fits your team, from the first session to campaigns repeated throughout the year.
- Workshops remotely on Teams or at your premises
- Examples tailored to your industry
- Phishing, CEO fraud and fake invoices
- Passwords and two-factor authentication (MFA)
- Phishing simulations
- Results report and recommendations
- Onboarding for new staff
- Audit trail for nFADP compliance
Awareness training complements the technical protection we put in place: antivirus, email filtering, backups and two-factor authentication.
Frequently asked questions about cybersecurity awareness
Who is the training for?
All staff, with no technical skills required. Management, accounts and reception are fraudsters' favourite targets, so the examples are adapted to their situations.
Does the nFADP require staff training?
The law does not mention training as such. It requires technical and organisational measures appropriate to the risk to protect personal data. Regular, documented awareness training is one of the simplest ways to show those measures are in place.
Is one session enough?
Rarely. Reflexes fade within a few months and fraudsters' techniques evolve. We recommend regular refreshers, simulations throughout the year and a session for every new starter.
Should staff be warned before a phishing simulation?
We advise announcing the principle of the campaigns without giving the dates. The exercise stays realistic, and the team knows the results are used to improve, never to sanction.
What should we do if someone clicked a suspicious link?
Alert your IT support immediately, without waiting or deleting the message, and change the password concerned. The faster the alert, the more limited the damage: an employee who reports their mistake does the whole company a favour.
Arrange a training session
No commitment. Response within 24h.