Security awareness training
We train your team, test it with phishing simulations and deliver the metrics and evidence that audits ask for.
The most attacked link is the person
Most incidents start with an email, a call or a message that someone on the team believed. An awareness program changes that: it teaches people to spot the trick, measures how many fall and how many report, and leaves evidence that the company trains its staff. T.I. RESCUE designs and runs it for you, on our own platform, with a team that handles real incidents every day.
Security awareness frequently asked questions
What is a security awareness program?
An ongoing plan of training, simulations and campaigns so people recognize and report attacks such as phishing. It is measured with the click rate and the report rate in simulations.
How often should phishing simulations run?
We recommend a monthly or bimonthly campaign with different scenarios each time, a general training session at least once a year, and coaching for whoever falls.
Is employee security training mandatory?
It depends on your regulator: in Colombia, SFC-supervised entities must run awareness programs (Circular 007 of 2018), data controllers must demonstrate accountability, and ISO 27001 requires it under control A.6.3.
Does it count for the ISO 27001 audit?
Yes. The program delivers attendance, content, simulation results and an improvement plan, which are the evidence for control A.6.3.
Do simulations hurt team trust?
Not when done right: staff are told the company runs simulations, nobody who falls is exposed, and coaching is educational, not disciplinary.
How much does it cost?
It depends on headcount and campaign frequency. Request a quote; the first simulation for 20 users is free.
How many of your team would fall for a phishing email today?
Request the free 20-user simulation and find out this week.
Request a free simulation