Security awareness training that's priced like a product, not a pricing puzzle.

Four releases a year. One reason your team keeps coming back.

Compliance training fails when it ships once and disappears. We release a new module every quarter and refresh the existing content annually so your team stays current — and auditors always see ongoing evidence.

1. Q1

   Foundations

   Core security awareness, password hygiene, device basics. The bedrock module every employee starts with.

   View outlineHide outline

   The bedrock module every employee starts with. We cover the foundational concepts the rest of the year builds on, with no assumed prior training.

   Course outline

   • 01What "security awareness" actually means in practice
   • 02Password hygiene that doesn’t drive your team crazy
   • 03Multi-factor authentication: the what, why, and how
   • 04Recognizing physical security risks — tailgating, shoulder surfing, lost devices
   • 05Personal vs. work devices: what crosses the line
   • 06Knowing when and how to escalate

   Outlines reflect our standard curriculum. Custom course development is available on request for an additional fee.

2. Q2

   Phishing & email

   Social engineering, email defense, real-world case studies refreshed for the current attack landscape.

   View outlineHide outline

   Email remains the #1 attack vector. This module teaches your team to spot the patterns attackers use, not just the obvious red flags.

   Course outline

   • 01Anatomy of a phishing email — and how attackers update their playbook
   • 02Spear phishing, whaling, and the targeted attack
   • 03Business Email Compromise (BEC): the long con
   • 04Smishing, vishing, and other "ishing" attacks
   • 05Real case studies: where small mistakes became breaches
   • 06What to do when you click — and why telling someone fast matters

   Outlines reflect our standard curriculum. Custom course development is available on request for an additional fee.

3. Q3

   Data & privacy

   Data handling, insider threat, regulatory updates aligned to CMMC and NIST 800-171 revisions.

   View outlineHide outline

   How your team handles data day-to-day determines whether you survive an audit — and whether you’re an insider threat without knowing it.

   Course outline

   • 01Classifying data: what’s sensitive, what’s not, and what’s gray
   • 02Insider threat awareness: recognizing patterns in yourself and others
   • 03CMMC and NIST 800-171: what your job actually requires
   • 04Cloud storage, file sharing, and personal accounts
   • 05Privacy regulations that apply to your role (GDPR, HIPAA, GLBA)
   • 06Reporting privacy incidents the right way

   Outlines reflect our standard curriculum. Custom course development is available on request for an additional fee.

4. Q4

   Incident response

   Reporting, escalation, year-end review. Lessons learned from the last twelve months of incidents.

   View outlineHide outline

   When something goes wrong, the first 30 minutes determine the outcome. This module is what your team actually does when an incident hits.

   Course outline

   • 01What counts as an incident vs. a problem
   • 02Your role in the response, no matter your title
   • 03Reporting: who, what, when, and how fast
   • 04Containment basics: what NOT to do
   • 05Lessons learned from the year’s incidents
   • 06Year-end refresher: what changed, what to remember

   Outlines reflect our standard curriculum. Custom course development is available on request for an additional fee.