Cyber Security User Awareness Training

Turn your number one weakness into your first line of defence

Cyber Security USER awareness training

82% of cyber security breaches involve a human element, yet less than a third of businesses report their staff have undergone any formal cyber security awareness training.

Turn your number one weakness into your first line of defence, with our targeted, in-person cyber security employee training.

We have experimented with several service providers, and none have succeeded in delivering a quarter of the value that Stripe OLT provides.

Huboo

John Brannan – Director of Infrastructure and Information Security

The importance of user training

Users have an essential role to play in keeping their organisation secure, and organisations that do not effectively support employees with the right level of cyber security awareness training leave themselves vulnerable to a variety of cyber security threats, including:

Risky personal devices

Without clear security policies around the use of company data and personally owned devices, staff may connect their own devices to your network, which in turn could lead to the inadvertent import of malware or compromise of sensitive information..

Legal risks

If your workforce is not supported and trained effectively, especially around how they handle particular types of sensitive information, the organisation may be subject to legal action.

Inefficient reporting

Without a robust cyber security culture and formal reporting process, you are unable to uncover potential issues as well as report genuine incidents.

Open to external attacks

Your users are the primary focus for external attackers. Attacks such as phishing or social engineering rely on taking advantage of legitimate user capabilities and in turn, can gain access rights.

Open to insider threats

Without the right processes in place, employees hold a lot of power. Dissatisfied employees can easily abuse their system level privileges or coerce other employees to gain access to information or systems to which they are not authorised.

Our CERTIFICATIONS

Recognised expertise, accredited by the best

IASME Cyber Assurance

Microsoft Solutions Partner

GIAC Security Essentials

ISO 27001

Certificationser Essentials Plus Certification

Cyber Essentials
Plus

CREST Certified

tailored cyber security training courses

At Stripe OLT, we understand there is no ‘one-size-fits-all’ solution, and when it comes to education, we believe different user groups require different forms of cyber security awareness and training. From interactive group sessions, to tailored Stakeholder workshops, we offer two distinct courses, that focus on specific areas of business risk.

Staff cyber Security
Awareness (SCA)

In our SCA course, we focus on risks to the individual and their role within the business. Hackers are increasingly aware of how businesses operate and what they need to do to gain the attention and trust of an employee. Focusing on the technicalities behind social engineering, we concentrate on the following areas:

Phishing e-mails & campaigns: What are they, how do they work and what to do if you receive one.

Introduction to Malware: We’ll take you through a live WannaCry demonstration to show you exactly how the hackers operate.

The importance of account hygiene: Why you need to keep your systems up to date and your passwords strong.

Remote Working and the Risks: Focusing on wireless device security and the necessity of a closed Wi-Fi network

System Management and Maintenance: We’ll demonstrate how hackers can gain your information and why they sell it on the Dark Web.

Documented cyber security user training materials.

EXECUTIVE CYBER SECURITY
FUNDAMENTALS (ECF)

Our ECF course covers one full day of training, where selected delegates will gain a relevant and up to date understanding of the current threat landscape and how to mitigate cyber security risks to their business. This interactive cyber security training day is comprised of the following syllabus:

Cyber Security Essentials: Immediate Risks to your organisation, common attack vectors and principle security controls.

Spear Phishing e-mails & campaigns: What are they, how do they differ to phishing attacks and what to do if you receive one.

Introduction to Malware: We’ll also take you through a live WannaCry demonstration to show you exactly how the hackers operate.

The importance of account hygiene: Why you need to keep your employee systems up to date and the importance of multi-factor authentication.

What is Social Engineering: How the hackers use your employees to gain internal information and credentials and demonstration

Remote Working and the Risks: We’ll cover the technicalities behind VPN’s and when to use them, how to utilise office 365 applications for device security and the necessity of a closed Wi-Fi network.

System Management and Maintenance: A demonstration into how hackers work and why they sell your user credentials and company data on the Dark Web.

Reputation Management: Why is it important and what to do if you are breached.

Documented cyber security user training materials.

Certified Microsoft engineers

On-the-day, 2nd and 3rd line support

Technical KPI focus, driven by account managers

Low cost solution, with high ROI

Flexible, user-based contract structure

Security-first focus, with enhanced security capabilities

Increased productivity for users, with minimized downtime

A long-standing, strong partnership model

Speak to
OUR Experts

Discover what we can do for your business.

WHY STRIPE OLT?

Microsoft specialists

Award-winning

security experts

microsoft GOLD certified

Whether you need to enhance collaboration with applications like SharePoint and Teams, or secure your environment with Azure Sentinel, you can trust in our highly certified Microsoft team.

Cyber SEcurity Awareness FAQs

What is cyber security awareness training and why is it important?

Cybersecurity awareness training is an educational program that enhances employees’ knowledge and skills in cybersecurity. It reduces human-related risks, promotes a security-conscious culture, and improves incident response capabilities. By educating employees about threats, best practices, and safe online behavior, organisations can mitigate the likelihood of security incidents resulting from human error. Compliance with regulations, building trust, and adapting to evolving threats are additional benefits. The training fosters a culture of security, empowering employees to make informed decisions and actively contribute to protecting sensitive data and systems. It is a crucial component in strengthening an organization’s security posture.

What should be included in a cyber security awareness training program?

A comprehensive cybersecurity awareness training program should cover topics such as cybersecurity overview, common threats (phishing, malware), password security, email and phishing awareness, safe internet practices, social media and online privacy, mobile device security, data protection and handling, incident reporting and response, and the importance of continuous education. Practical examples, interactive exercises, and periodic assessments help reinforce cyber security awareness training. The goal is to educate employees about cybersecurity risks, best practices, and protective measures to create a security-conscious culture and mitigate potential security incidents.

How can phishing tests be used to increase security awareness?

Regular phishing tests contribute to a heightened security posture, empowering employees to protect themselves and the organization from real cyber threats.

Phishing tests increase security awareness through simulating real-world scenarios, helping employees recognise phishing indicators, reinforcing training concepts, creating a sense of urgency, providing personalised feedback, promoting a security-conscious culture, and informing targeted training efforts.

How long does it take to build a security awareness training program?

The time required to build a security awareness training program varies depending on factors such as organisation size and complexity. Key steps include needs assessment, content development, review and revision, selecting a delivery mechanism, piloting and testing, and deployment. Developing comprehensive training materials may take several weeks to a few months, reviews and revisions ensure accuracy and alignment with policies, alongside pilot testing and feedback collection which help refine the program. The overall process can span several months, considering planning, content creation, testing, and implementation, therefore adequate time allocation is crucial for an effective and tailored security awareness training program.

How often should you conduct security awareness training programs?

Security awareness training should be conducted at least once a year for all employees, with regular refresher training to reinforce key concepts. Onboarding training should be provided to new hires, and trigger-based or role-based training may be necessary in response to specific events or job responsibilities. Continuous efforts to integrate security awareness into regular communications and maintain a security-conscious culture are essential.

Speak to the experts

Want to understand more about how our team can support your requirements? Fill our the form and we be in touch shortly.