Overview
US staff are targeted daily by fake IRS, package-delivery, payroll and invoice scams, and finance teams by wire-transfer fraud. Our training uses realiztic US examples, covers handling health, financial and personal data, and gives you completion records for HIPAA, PCI DSS, SOC 2 and customer audits.
Most successful attacks involve a human element — a clicked link, a reused password, a convincing phone call or a misdirected payment. Technology reduces risk, but people who recognize and report threats stop attacks that tools miss.
Our Security Awareness Training programs are built around real attacks our SOC and red team see. We combine short, engaging modules with live sessions for high-risk groups such as finance, executives, HR and developers, and reinforce learning with phishing simulations.
Programs are aligned to compliance requirements such as SOC 2, HIPAA, PCI DSS, ISO 27001 and state privacy laws, with reporting that proves training actually happened.
Awareness training built for US staff
- Lures US employees really receive: IRS and benefits scams, package delivery, payroll and e-signature requests
- Wire-fraud and payment-change verification drills for finance and accounts payable teams
- Modules on handling health, financial and personal data under HIPAA, GLBA and state privacy laws
- Completion records for SOC 2, HIPAA, PCI DSS and customer audits
What's included
Our approach
- AssessUnderstand your risks, culture and compliance needs.
- DesignRole-based curriculum and schedule.
- DeliverLive, virtual and on-demand training.
- ReinforcePhishing simulations and micro-learning.
- MeasureCompletion, quiz results and behavior change.
What you receive
- Annual training plan
- Role-based training sessions
- Knowledge assessments
- Completion and audit reports
- Program effectiveness review
Standards & frameworks
- ISO/IEC 27001 A.6.3
- SOC 2 CC1.4/CC2.2
- PCI DSS 12.6
- HIPAA §164.308(a)(5)
- NIST SP 800-50
Frequently asked questions
How often should employees be trained?
At least annually, with onboarding training for new joiners and short, frequent reinforcement throughout the year.
Is training delivered live or online?
Both. We combine on-demand modules with live sessions for high-risk teams.
Do you provide evidence for auditors?
Yes. Completion and assessment reports are provided for compliance evidence.
Do you quote in US dollars?
Yes. US proposals are fixed-price and quoted in USD, with scope, effort, deliverables and payment terms set out in writing before work starts. See our US pricing guide for published market ranges.
Can you support US organizations from India?
Yes. All services are delivered remotely by our team in India. India is 9.5 hours ahead of US Eastern time during US daylight saving time (10.5 hours in winter) and 12.5 to 13.5 hours ahead of Pacific time. Meetings and testing windows are agreed around your US time zone at scoping, and 24/7 services run around the clock.