The everyday habits that keep an organisation out of trouble
Short, plain-language sessions for everyone on staff, built around the tools and policies you actually use. Online or on site, in English, German or French.
Overview
Small habits, practised by everyone
Most security problems in an ordinary working week are not exotic. A reused password, a skipped update, a file shared with the wrong link, a laptop left open in a train, an odd email nobody mentioned. Good habits prevent a lot of this, and they are easier to learn when someone explains them in plain words, using the systems people already have in front of them.
Cyber hygiene training covers those habits for every member of staff, whatever their role or technical background. We keep sessions short and practical, show how things work in your own password manager, email client and file sharing, and explain your policies in terms people can follow.
It is the everyday-habits counterpart to our broader security awareness programme. That programme also covers social engineering in depth, incident response, management sessions and developer training. This one stays with the basics everyone needs, and it fits well into onboarding so new colleagues start with the right habits.
Who it is for
Organisations of any size that want every employee to have the same sound basics, teams that have introduced new tools such as a password manager or multi-factor authentication, companies with many remote or travelling staff, and organisations that want security basics built into onboarding.
The work, from scoping to evidence.
What we do
Passwords and sign-in
Long, unique passwords, how a password manager helps, and why multi-factor authentication matters, shown in the tools your organisation uses.
Phishing and reporting
How to recognise suspicious emails, messages and calls, and how to report them through your own channel without worrying about being wrong.
Updates and device care
Installing updates, locking screens, encryption, removable media and what to do when a device is lost or stolen.
Handling and sharing data
Where data belongs, how to share files safely, classification as your policy defines it and what not to paste where.
Working remotely and travelling
Home networks, public Wi-Fi, screens in public places, borders and hotel rooms, and the rules your organisation sets for them.
When something looks wrong
Who to tell, what to note down, what not to touch, and why reporting early is always better than fixing it quietly.
How the engagement runs
Kickoff
We agree the audience, the topics, the format and the languages, and sign an NDA first if you need one.
Tailoring
We review your relevant policies and the tools staff use every day, so examples and instructions match what people will see at work.
Delivery
Short sessions online or on site, in English, German or French, as a one-off round, a series or part of onboarding.
Practice
Short exercises with realistic examples, such as spotting a suspicious message or setting up a password manager, with room for questions.
Follow-up
A summary of what was covered, the questions that came up and the points where a policy or a tool could be made easier to follow.
What you receive
- Sessions tailored to your tools and policies
- Training materials for your records
- Short reference sheets for staff
- Onboarding version for new colleagues, where agreed
- Attendance records for audit evidence
- Summary with observations and suggestions
Questions
How is this different from your security awareness training?
Security awareness training is the broader programme, with social engineering in depth, incident response, management sessions and developer training. Cyber hygiene training focuses on the everyday habits every member of staff needs. It works well as the base layer, with the rest added where it is needed.
Do people need a technical background?
No. The sessions are written for everyone, in plain language, and use the tools people already work with.
Can it be part of onboarding?
Yes. We can prepare a version for new colleagues that your team can schedule alongside other onboarding sessions.
Is it online or in person, and in which languages?
Either, online or on site, in English, German or French. We agree the format with you based on your teams and locations.
Related services
- Advisory and responseSecurity awareness trainingTraining from Black Fox Security: security and social engineering awareness, incident response and DevSecOps, for staff, developers and management.
- Governance and riskPolicies and proceduresBlack Fox Security writes and reviews your security policies: acceptable use, access control, incident response, suppliers, backup and more, in plain language.
- Advisory and responseDevSecOps trainingHands-on DevSecOps training from Black Fox Security: CI/CD security, infrastructure as code, containers, cloud, supply chain, secrets and threat modelling.
- Advisory and responseSecure coding trainingSecure coding training from Black Fox Security: OWASP Top 10 vulnerability classes, secure design and code review, and security tests, in your team's stack.
Give everyone the same good basics
Tell us about your teams, your tools and your policies. We will propose sessions that fit how your people actually work.