B.01
Each quarter you see how often your team clicks on phishing emails.
Managed Security Awareness
Every quarter we send simulated phishing emails. Anyone who clicks gets a short training session. We document the results for management and your insurer.
01
Your Benefits
B.02
Your staff learn from realistic examples rather than slides.
B.03
Training is documented, which helps you meet the evidence requirements of your cyber insurance, for example.
02
Service scope
L.01
Phishing simulations every quarter, using templates that suit your industry
L.02
Results per employee and per department, anonymised for management
L.03
Short, targeted training (5–10 min) for anyone who clicked on a phishing email
L.04
Introductory module for new staff: strong passwords, phishing, data classification, social engineering
L.05
Annual refresher for all staff
L.06
Quarterly report as a PDF with hit rate, trends and recommendations
L.07
An agreed procedure with HR for people who repeatedly fall for simulations
03
Requirements and exclusions
→ Prerequisites
- Mailcow or Microsoft 365 as the source mail server for the simulations
- An HR contact for sensitive cases
- Maintenance contract, if you need a guaranteed response time
✗ Not included
- General IT training (Microsoft 365, Nextcloud) is covered by NDS-PRJ-SCHUL.
- Advice on your GDPR obligations is a project (NDS-PRJ-COMPL).
- Forensic follow-up of a real phishing attack is charged by the hour (NDS-OP-KON25).
- Real penetration tests (red teaming) are a separate service. This building block covers simulated phishing emails only.
04
Related Services
NDS-PRJ-SCHUL
Staff training
We train your staff on Microsoft 365, Nextcloud, IT security and new software, on site or by video, with exercises and handouts to take away.
NDS-PRJ-COMPL
Compliance consulting
We advise you on GDPR, ISO 27001 and BSI IT-Grundschutz. The result is a list of measures, ordered by what matters most for your business.
NDS-SEC-WAZUH
Wazuh SIEM Managed
We collect and assess security events from your devices, servers and cloud services in one place. We run the platform and read the alerts, and critical incidents reach you as tickets.
Does this fit your business?
In 30 minutes we work out whether this service suits you. Free and without obligation.