Skip to content
Cyber Guys

Protect

Staff awareness and phishing simulation

Short, relevant training and realistic practice for your team.

We run an ongoing awareness programme for your staff: short scenario-based modules matched to their role and industry, phishing simulations on an agreed calendar, and follow-up learning where it helps. Management summaries show observations, limitations and trends — never punitive rankings of individuals.

Request a quote
Price
Quoted on scope
How you can engage us
Ongoing service
Delivered by
Cyber Guys
Review cadence
Each campaign period, as set out in the agreed calendar

Who it is for

Businesses that want staff to recognise and report phishing, payment fraud and impersonation, without lengthy or generic training.

Scope

The staff listed in the scope, using the Cyber Guys platform for learning and the agreed simulation calendar.

What is included

  • Staff onboarding to the learning platform
  • Module assignments by role and industry
  • Short scenario modules covering phishing, passwords, multi-factor authentication, handling sensitive information, payment fraud, incident reporting, safe AI use, voice cloning, deepfake calls and fraudulent bank-detail changes
  • Professional gamification: progress, completion and team recognition, without public shaming
  • Phishing simulations on the agreed campaign calendar
  • Clear guidance on how staff report suspicious messages
  • Follow-up learning for staff who would benefit from it
  • Management summaries showing observations, limitations and trends

What is not included

  • Work outside the agreed scope, which is quoted separately
  • Disciplinary or HR action, or advice on it
  • Accredited training or formal qualifications
  • Custom video production
  • Simulations outside the agreed campaign calendar
  • Rankings or reports used to single out individuals for punishment

How delivery works

  1. 01

    Onboard

    We enrol staff, record roles and agree the topics that matter for your industry.

  2. 02

    Plan the calendar

    We agree a campaign calendar of modules and simulations with you.

  3. 03

    Run the programme

    We assign modules, run simulations on the agreed dates and assign follow-up learning where it helps.

  4. 04

    Report

    We report completion, reporting behaviour and trends, with the limitations of the data stated plainly.

  5. 05

    Adjust

    We adjust the calendar and topics based on what the trends show and on new fraud patterns.

Who does what

You

  • Provide and maintain the staff list and roles
  • Approve the campaign calendar
  • Arrange for simulation emails to be allowed through your email filtering
  • Encourage staff to complete modules and report suspicious messages

Cyber Guys

  • Organise the agreed campaign calendar
  • Assign modules by role and industry
  • Run simulations and assign follow-up learning
  • Produce management summaries with observations, limitations and trends
  • Keep content current with emerging fraud patterns

Your IT provider or partner

  • Your IT provider, where they manage email filtering, allows simulation messages through as agreed

Access we need

  • A staff list with names, email addresses and roles
  • Email filtering changes to allow simulation messages, made by you or your IT provider

We never ask for your password. Access is through a named account that you or your IT provider create for the engagement, and can remove at any time.

Dependencies and licences

  • Simulation delivery depends on your email filtering allowing the simulation messages
  • Reporting of simulations depends on staff using the agreed reporting method

What you receive

  • Agreed campaign calendar
  • Module assignments
  • Simulation results
  • Management summaries

How we know it is finished

  • Each period: the agreed modules and simulations have run and the management summary is delivered

Request a quote for Staff awareness and phishing simulation

Tell us a little about your business. We will arrange a short scoping call to agree what is in scope and send a written quote. The call is about scope and price — it is not free security advice.

Please do not include passwords or other access details.

This asks us to scope Staff awareness and phishing simulation. The scoping call is a sales conversation, not a free security review, and nothing is ordered until you accept a written quote.