Security Awareness Training
ISO 27001 requires staff to be aware of the information security policy and their own responsibilities. Generic online modules meet the letter of that requirement but rarely change behaviour. I build training around your own policies and the risks your staff actually face, and run it as a planned programme.
Led by Levent Şakar, IRCA-certified ISO 27001 and ISO 9001 Lead Auditor.
A programme built around your organisation
Training works when it uses your own examples: your policies, your systems and the incidents your people are most likely to meet. Running it as a planned programme means it happens on schedule, not just before an audit.
| Supports | ISO/IEC 27001 (Annex A 6.3) and UK GDPR staff training requirements |
|---|---|
| Delivery | Live sessions, remote or on site, with recorded content where useful. |
| Fee | Fixed for a starter package or an annual programme. |
Who it's for
- Organisations preparing for ISO 27001 certification
- Certified organisations whose awareness training has become a formality
What it covers
- Content written around your own policies and ways of working
- Separate sessions for general staff, managers and new starters
- Phishing and social engineering, handling information, remote working and incident reporting
What you receive
- Training materials you can keep using
- An annual awareness plan
- Attendance and assessment records that can be used as audit evidence
Two ways to start
Starter package
Content tailored to your organisation and two live sessions. A good fit before a certification audit.
Annual programme
Tailored content, a yearly plan, four quarterly sessions and a simple check of what staff have taken in.
Extra sessions can be added at any point. This is not a technical training course or an off-the-shelf e-learning library.
Want training your staff will actually use?
A short call is enough to agree what the first sessions should cover.