CyberSolace / Cyber Awareness
Good security starts
with everyday decisions.
Human risk assessment, practical training and conversations that help your people make safer decisions in their everyday work.
Understand where support is needed, then focus learning where it can make a difference.
People, supported
Make the safer choice
the easier choice.
A convincing request can arrive during an ordinary working day. What happens next depends on more than someone spotting a suspicious link.
People need relevant guidance, clear ways to verify a request and a straightforward route to report concerns. They also need confidence that asking for help is welcome.
Our preferred starting point is human risk assessment: exploring what people understand and how they would respond to realistic situations. The findings help us focus learning on the areas that need attention, alongside the processes and technical controls that support your people.
How we help
Understand the risk.
Make the learning relevant.
01
Human risk assessment.
Our preferred approach uses realistic scenarios to explore the gap between knowing the guidance and choosing a response. It looks beyond suspicious emails to situations involving passwords, sensitive information, remote working and physical security. The findings help identify where focused training, clearer processes or further support would be useful.
OUR PREFERRED APPROACH / SCENARIO-BASED LEARNING
02
Briefings for your leadership.
Focused conversations for boards and senior teams about the threats relevant to their roles, the information they handle and the example they set. We connect cyber risk with business decisions and oversight, in language that respects their experience and time.
BOARDS / SENIOR LEADERSHIP TEAMS
03
Messages that keep learning alive.
Tailored content for internal communications, intranets, posters and digital signage. Clear reminders reinforce the behaviours you want to encourage between sessions, using the channels your people already see.
INTERNAL COMMUNICATIONS / ONGOING REINFORCEMENT
Also available / On request
Traditional phishing tests.
We can still run a classical phishing test where a client wants one. It is not our default or preferred approach. We agree its purpose and scope in advance, and use the results to support constructive learning rather than single out individuals.
Our approach
Assess. Support. Revisit.
We agree the audience, priorities and format with you. Assessment helps us identify the learning needs; targeted awareness content, leadership briefings and reminders help turn those findings into practical support.
01 / Understand
Understand the decisions.
Use relevant scenarios to explore knowledge, choices and the areas where people need clearer guidance.
02 / Engage
Focus the learning.
Shape learning and guidance around the gaps identified, with constructive feedback and clear next steps.
03 / Reinforce
Review the progress.
Agree appropriate follow-up and reassessment to explore whether understanding and scenario responses have changed.
What progress looks like
Look beyond
attendance.
Attendance and click rates offer a limited view. Human risk assessment helps explore understanding and decision-making across a wider range of situations.
- Gaps that need attention. Where do scenario responses suggest a need for clearer guidance or targeted learning?
- Knowledge and choices. Can people apply what they know when a situation calls for a decision?
- Decisions supported by processes. Are verification and escalation practical in the working day?
- Progress over time. What does follow-up assessment show, and what support is still needed?
A few practical questions
Before we begin.
Can you tailor the approach to different teams?
Yes. We shape the assessment and supporting awareness content around your organisation’s context and the roles involved. Leadership briefings focus on the responsibilities and decisions of boards and senior teams.
How is human risk assessment different from a phishing test?
A traditional phishing test usually observes responses to a simulated email. Human risk assessment uses scenarios to explore knowledge and decision-making across a broader range of security situations. We use the findings to guide learning and support, rather than treat a click rate as a complete measure of risk.
Can you still run a traditional phishing test?
Yes, on request. Human risk assessment is our preferred approach, but we can agree a classical phishing test where it meets a client’s needs, with constructive follow-up.
Does training replace technical security controls?
No. Awareness is one part of a wider approach. People also need effective technical protections, clear procedures and support when something goes wrong.
Let’s make it relevant
Where would better
understanding help most?
Tell us who you want to reach and what concerns you. We will help you choose an assessment and learning approach that fits your organisation and budget.