Security Awareness Training
Security awareness training your staff will actually finish
Most breaches start with a person clicking something. Short monthly training and realistic phishing tests teach your team to spot the scam, and show you who needs more help.
Book Your Free Security Gap CheckFirewalls and antivirus do nothing when a staff member types their password into a convincing fake Microsoft login page, or pays a supplier invoice after the bank details were quietly changed. Those attacks target people, and the fix is training people.
Annual training days do not work. People forget, and the scams change. DJC runs short, regular training modules that take a few minutes each, plus simulated phishing emails modelled on real attacks. Staff who click get a short lesson on the spot. You get a report showing who is improving and who is at risk.
Training and phishing simulations run on BullPhish ID. We set up the campaigns, choose the scenarios, chase completion and report back to you, so it does not become another admin job for your office manager. Want to see what your staff credentials already look like out there? Start with a free dark web scan.
What security awareness training includes
Short training modules
Brief video lessons on phishing, passwords, invoice fraud, safe browsing and handling data. Minutes, not hours.
Phishing simulations
Realistic fake phishing emails sent to your staff, based on the scams currently hitting Australian businesses.
Teach at the moment of the click
Anyone who clicks a simulated phish gets a short lesson straight away, when it will actually stick.
Reporting you can act on
Click rates, completion rates and repeat clickers, so you know where the real risk in your business sits.
Run for you
We schedule campaigns, enrol new starters and chase completion. You read the report.
Evidence for audits and insurers
Staff training is a required control in SMB1001 and a common cyber insurance question. We give you the records.
If IT is your responsibility
An owner, not an account manager
You deal with Daniel or Julian Church directly. We keep the client list deliberately short so the people who answer already know your environment.
Numbers you can defend
Every engagement starts with a costed IT roadmap: what technology should cost this year and next, in business terms you can take to a board or a budget meeting.
See what managed IT typically costsWorking alongside internal IT
If you already have an IT manager or a small team, we are not here to replace them. Co-managed IT adds tooling, escalation and after-hours cover around them.
How co-managed IT worksWhy DJC
- We run it, you don't. Training platforms fail when nobody owns them. We own the schedule, the enrolments and the follow-up.
- Training plus technology. People will still slip up. Our Huntress ITDR watches Microsoft 365 sign-ins so a stolen password is caught quickly when it happens.
- Certified to the standard we advise on. DJC holds SMB1001 Diamond and ISO 27001 certification, and our own team does the same training we give yours.
Included in every managed cyber tier
Take it on its own, or get it included in any of our managed cyber tiers, together with the rest of the security stack and a quarterly review with a person.
Quick answers
How often should staff do security awareness training?
Little and often works better than an annual session. We run a short module each month and phishing simulations through the year, so the lessons stay fresh and match the scams currently in circulation.
Are the phishing simulations included?
Yes. Phishing simulations are part of the service, not an extra. Staff who click receive a short lesson straight away, and you get reporting on click rates over time.
Will staff know they are being tested?
We recommend telling staff the program exists, but not when the tests will arrive. The point is to build habits, not to catch people out, and the reporting focuses on improvement over time.
Is training included in DJC's managed cyber security tiers?
Yes. Security awareness training and phishing simulation are included in every managed cyber security tier. You can also take training on its own.