HUM / HUM-02
Phishing simulations and coaching
Controlled simulated phishing exercises to observe responses, improve reporting and target training without collecting real credentials.
WHEN IT HELPS
A focused response
to a defined need.
CISO and HR; a need to assess reporting habits or support a new email-protection rollout.
SCOPE & OUTCOMES
What the engagement covers.
Scope
- Proportionate scenarios
- approved scope and rules
- tracking relevant actions, debriefing and targeted coaching
Deliverables
- Campaign plan
- aggregated report
- lessons and audience-specific learning actions
Acceptance evidence
Results distinguish human interaction, automated mechanisms and reporting; individual data access is restricted.
DELIVERY
How the work is structured.
Approach
Assess needs; tailor by role; create and deliver materials; measure learning; adjust with owners.
Prerequisites & responsibilities
Customer: sponsor, communications, HR/DPO where relevant, participants and reporting channel. Provider: learning design, delivery and proportionate analysis.
Scope factors
User groups, languages, formats, sessions, campaigns and customisation. Recurring programme or one-off activity; tools, travel and licenses priced separately.
Questions to clarify
Which behaviour is measured? Who accesses results? How will filters and automated link opening be accounted for?
IMPORTANT BOUNDARIES
Agree HR/legal safeguards, proportionality and retention; avoid distressing themes and collection of real passwords.
Individual results are handled confidentially and interpreted in context. The programme supports useful behaviour; it does not replace technical safeguards or business controls.
IN PRACTICE
Illustrative situations.
These examples describe possible engagements and target outcomes. They are not customer references or achieved results.
Scenario 01
Staff hesitate to report suspicious email. Project: a simulation with reporting support and a debrief. Target outcome: a usable reporting process; reporting metrics complement click counts.
Scenario 02
An organisation’s link scanner produces unusually high click counts. Project: reconcile logs and refine measurement. Target outcome: a corrected report distinguishing bots and people; no humiliating rankings are published.
Technology and reference context
An authorised simulation platform; test messaging and minimised data.
The final technology set is agreed during scoping, based on interoperability, licensing, access rights and operating requirements.
CONNECTED SERVICES
Build the next step.
These services can complement the engagement. They are not automatically included.
START A CONVERSATION
Make the scope clear.
We will clarify the objective, dependencies and responsibilities of this service before proposing delivery.