Security training that people remember on a Tuesday afternoon
Training for staff, developers and management, delivered by the people who test, audit and investigate for a living. Short on slogans, long on what actually happens.
Overview
Why most awareness training does not stick
A yearly video and a quiz satisfy a checkbox. They rarely change what someone does when a convincing email arrives at the end of a long day, or when a caller who sounds like IT asks for a code. People remember stories, practice and things that feel like their own job.
Black Fox trains with material drawn from real attack techniques: the pretexts we use in social engineering drills, the mistakes we find in penetration tests and the incidents we pick apart afterwards. Sessions are built around the audience. Staff learn to recognise and report. Developers learn how their code gets broken. Management learns what decisions it will face during an incident.
Training works best alongside testing. A phishing simulation or social engineering assessment shows where people need help, and the next session can address exactly that.
Who it is for
Organisations whose people are the first line against phishing and fraud, development teams shipping software that handles customer data, management teams preparing for incidents, and anyone whose framework expects regular security awareness training, as ISO/IEC 27001, SOC 2, PCI DSS and NIS2 programmes commonly do.
The work, from scoping to evidence.
What we do
Security awareness
The essentials for everyone: passwords and multi-factor authentication, safe handling of data, devices and travel, and how and when to report something odd.
Social engineering awareness
Phishing, phone pretexts, fake suppliers and tailgating explained through real examples, with practice at spotting them.
Incident response training
For responders and management: roles, first steps, evidence, communication and decisions, practised in tabletop exercises.
DevSecOps training
For developers and engineers: common vulnerability classes, secure coding, secrets, dependencies and security in the pipeline, with hands-on exercises.
Management sessions
For leadership: the risks that matter to the business, the obligations that fall on management and what good security reporting looks like.
Measuring the effect
Optional phishing simulations or follow-up assessments before and after training, so you can see what changed.
How the engagement runs
Kickoff
We agree the audiences, the topics, the format and the languages, and sign an NDA first if you need one.
Tailoring
We adapt the material to your organisation: your tools, your processes, your reporting channels and the risks you actually face.
Delivery
Sessions on site or remote, in English, German or French, sized so people can ask questions.
Exercises
Hands-on work, tabletop exercises or simulations, depending on the audience and what you want to test.
Follow-up
A summary of what was covered, what came up in the sessions and what to repeat or extend next time.
What you receive
- Training plan per audience
- Sessions adapted to your organisation
- Training materials for your records
- Attendance records for audit evidence
- Exercise or simulation results, where included
- Summary report with recommendations for the next round
Questions
Is the training online or in person?
Either. Small interactive sessions work best, on site or remote. We agree the format with you based on your teams and locations.
In which languages do you train?
In English, German and French.
Will training stop people clicking on phishing emails?
It reduces the chance and, just as important, makes people report what they see. Nobody can promise that no one will ever click, so training works best together with technical controls and a reporting process that makes reporting easy.
Do you provide evidence for our auditors?
Yes. You receive the training plan, the materials, attendance records and a summary, which are the records auditors usually ask for when they test awareness training.
Related services
- Advisory and responseDevSecOps and secure developmentDevSecOps from Black Fox Security: secure SDLC, threat modelling, code review, security in CI/CD, dependency and secret scanning, and developer training.
- Advisory and responseDigital forensics and incident responseDFIR from Black Fox Security: incident post-mortems, network and storage forensics, reverse engineering, data recovery, response plans and tabletop exercises.
- Governance and riskPolicies and proceduresBlack Fox Security writes and reviews your security policies: acceptable use, access control, incident response, suppliers, backup and more, in plain language.
Train the people attackers call first
Tell us who needs training and what worries you. We will propose sessions that fit your teams and your obligations.