Field notes
Threat intelligence, programme design and benchmark data from the campaigns we run. Written for the people who have to make this work on a real budget.
Annual awareness training produces completion certificates, not behaviour change. Here is the mechanism behind the failure and the programme structure that fixes it.
What the NIST CSF actually asks of you, how its six functions map to awareness training, and how to use it without turning it into a documentation exercise.
A defensible model for the business case, including the assumptions that make most vendor ROI calculators worthless and how to present the number without overclaiming.
Business email compromise costs organisations billions a year and defeats email filtering entirely. The defence is process, not vigilance. Here is the process.
The seven structural signals that give away almost every phishing email, why each one works psychologically, and how to train the check until it becomes automatic.
We will run a baseline campaign against your own team and show you the real number, not the one you hope for. Most teams are surprised.
20 minutes · Live product · No obligation