Plan a cohort
A first cut of who learns what. This is a planning aid, not a quote. It keeps malware analysis off the all-staff calendar and puts phishing on it. Take the result into a briefing and we will adjust it to how your company actually works.
Suggested cohort
7 workforce topics Split the company into two or three groups so a whole function is never in training at once. Managers attend before their teams.
For employees Phishing email recognition Links, attachments, and QR codes Phone, text, and in-person social engineering Passwords and multi-factor authentication Invoice fraud and payment redirection Spear phishing and business email compromise Reporting an incident For IT and security Not in this rollout. Turn on technical upskilling, or choose the IT audience, to add them.
Order of work 1 Name an owner and the real reporting path. Training that points at a mailbox nobody reads does not stick. 2 Open with phishing. It is the attack people will see the week after class. 3 Run the email and payment drills. People decide on a message, then see the tell they missed. 4 Managers get the same examples, plus what to do when someone reports late. 5 Put the phish drill on the calendar again next quarter. One sitting is not a program. Use this plan in a briefing Saved on this device only, so the briefing page can attach it. No account.
Cybertection Training Center — cohort brief
Company size: 26–150 (A few groups, rotating)
Who: A mixed rollout
Priorities: Phishing email, Wire and invoice fraud
Workforce topics:
- Phishing email recognition
- Links, attachments, and QR codes
- Phone, text, and in-person social engineering
- Passwords and multi-factor authentication
- Invoice fraud and payment redirection
- Spear phishing and business email compromise
- Reporting an incident
Specialist tracks:
- Not in this rollout
Suggested sequence:
1. Name an owner and the real reporting path. Training that points at a mailbox nobody reads does not stick.
2. Open with phishing. It is the attack people will see the week after class.
3. Run the email and payment drills. People decide on a message, then see the tell they missed.
4. Managers get the same examples, plus what to do when someone reports late.
5. Put the phish drill on the calendar again next quarter. One sitting is not a program. 