Security Awareness Training

Reduce human cyber risk with continuous training, realistic phishing simulations, and measurable improvement.

Book a Security Awareness scoping call

Wanstor’s Security Awareness Training

Most successful cyber incidents start with people – phishing, social engineering, and unsafe handling of data. Wanstor’s managed Security Awareness Training service helps you change behaviour at scale, combining training and simulated attacks with reporting that shows risk reduction over time.

If you want to:

  • Reduce phishing risk without building a programme internally
  • Identify high-risk behaviours and fix them with targeted training
  • Build a security-aware culture with measurable outcome
  • Support compliance expectations with ongoing awareness training

Then this service is for you.

The challenges we solve

  1. Fewer successful phishing and social engineering incidents
    Bi‑monthly phishing simulations and targeted follow-up training help users recognise and avoid common attack techniques.
  2. Measurable reduction in human risk over time
    Monthly reporting highlights trends, engagement, completion rates and improvement areas – so you can demonstrate progress and focus effort where it matters.
  3. Stronger compliance and audit readiness
    Training content can be aligned to UK compliance standards such as GDPR, Cyber Essentials and ISO 27001, supporting security culture and governance expectations.
  4. Reduced load on internal IT and security teams
    Wanstor runs the platform configuration, campaigns, reporting and ongoing optimisation – so your teams don’t have to build and manage a programme from scratch.

What’s included

Core service components

You’ll come away with a clearer, governed data landscape – ready for secure use across the business.

    Typical outcomes include:

    • Initial setup & configuration of your security awareness training platform
    • Bi‑monthly phishing simulations to test awareness and identify gaps
    • Targeted training for individuals or groups based on simulation results
    • Monthly management reporting covering engagement, completion, and risk trends
    • Ongoing support from a Cyber Security Analyst to evolve campaigns as requirements change

     

    Platforms supported: KnowBe4 or CybSafe (customer-provided licences).

    How it works

    We help you define and align the governance model before configuring the platform.

    • Step 1 — Scope the programme

    Evaluate your data governance maturity and identify gaps and improvement opportunities.

    • Step 2 — Launch baseline training (quarterly)

    Design a solution aligned to your business goals and data requirements.

    • Step 3 — Run phishing simulations (bi‑monthly)

    Create an up‑to‑date data estate map including classification and lineage.

    • Step 4 — Report and improve (monthly)

    You get clear monthly reporting on performance, trends, and who needs extra support—so you can track progress and show ROI.

    Reporting you can use with leadership

    Monthly reporting is designed to be clear and actionable, typically including:

    • Participation and training completion rates
    • Users who need targeted training and their progress
    • Risk trends over time (what’s improving, what needs focus)

     

    We also provide training completion statistics derived from simulation outcomes to help you assess programme effectiveness.

    Prerequisites

    • KnowBe4 or CybSafe licences for all users
    • Power BI Pro licence for reporting access
    • Outlook reporting plugin (recommended)
    • External email tagging configured (recommended for enhanced detection)

    Typical delivery effort

    Monthly reporting is designed to be clear and actionable, typically including:

    • Initial setup: typically 2 days
    • Ongoing campaign management: typically 1 day per month

     

    Optional add-ons:

    • Outlook plugin configuration + user reporting guidance: 0.5 day
    • External email tagging configuration: 0.5 day

    Book a scoping call to design your bi‑monthly simulations, targeted training and monthly reporting.

    In 30 minutes, we’ll confirm your user scope, platform (KnowBe4 or CybSafe), simulation approach, and reporting needs - then outline next steps.