Cyber security
Security awareness training
Short, regular lessons and realistic phishing simulations, so your people recognise an attack and report it instead of clicking, with reports that show who improved and which lures still work.
Who it is for
Businesses in Teesside and the North East whose last security briefing was an annual slide deck, whose finance team approves payments by email, and whose insurer or larger customer now asks whether staff are trained. Any business where one person clicking at 16:42 on a Friday could cost a payment, a mailbox or a week.
What you get
Every user enrolled in Huntress security awareness training: a baseline phishing simulation that shows who would have been caught, short lessons a few minutes long on phishing, passwords and data handling, regular simulated phishing built around the lures that work in 2026, and reports for managers showing completion, who improved and which lures still bite, so training goes where it is needed and the evidence is there for an insurer.
The problem
Even careful, tech-savvy staff make mistakes when they are busy or tired. Most attacks rely on one person clicking, so training people is as important as the technology.
Your staff are careful, but at 16:42 on a Friday tired beats careful. Phishing emails now rarely have typos: they copy your tone, timing and workflows, and common sense gives way when someone is busy. Attackers go after accounts more than the network, and the account they want is the one that can approve a payment or change a supplier's bank details.
An annual refresher is long forgotten by 16:42 on a Friday. Short lessons built on real scenarios build habits: check an urgent request, notice when the context is wrong even though the logo looks right, and confirm a payment change through a second channel. The programme tracks who falls for which lure (finance approvals, supplier changes, HR notifications) and targets that behaviour, so you get before-and-after numbers for the attacks you actually face.
Fewer clicks mean fewer tickets and fewer emergencies. Teaching one good habit costs less than cleaning up one successful payment fraud, and insurers, Cyber Essentials Plus assessors and larger customers increasingly expect to see evidence of training.
What Odyssey provides
- Huntress security awareness training, delivered in short episodes staff fit around their work
- A baseline phishing simulation first, so training starts where the risk is rather than everywhere at once
- Regular simulated phishing emails kept current with the lures attackers use now
- Targeted micro-training for the people and scenarios that need it most, such as finance approvals and supplier changes
- Reports for managers on completion, who improved and which lures still work, and the evidence insurers ask for
- Set-up, enrolment and reporting handled by our team, alongside your Microsoft 365
What is included
| Included | Detail |
|---|---|
| Enrolment | Every user set up for training through your Microsoft 365, with joiners added and leavers removed as they come and go |
| Baseline | One targeted simulated phishing email before any training, so you know who would have been caught and the programme starts where it is needed |
| Lessons | Short episodes on phishing, passwords, data handling and the scenarios your business faces, assigned on a schedule |
| Simulations | Regular simulated phishing emails, varied and current, with the people who click guided straight into a short lesson rather than named and shamed |
| Reporting | Completion, simulation results and improvement over time for managers, in a form that answers an insurer's or customer's questionnaire |
| Review | A short report after each round saying who improved, which lures still bite, and where to tighten process, such as second-channel verification for payments |
| Compliance courses | Short GDPR, PCI DSS and ISO 27001 awareness courses alongside the security training |
Not included, or sold separately
- Email filtering
- Training covers the messages that get through; stopping most of them before the inbox is email filtering, a separate service
- Endpoint and identity protection
- What happens on the device and the account when someone does click is covered there
- Bespoke classroom training
- The programme is online and continuous; an in-person session for a board or a finance team can be arranged and priced separately
- Your payment process
- We recommend second-channel verification for payment changes and show you where it would have helped; putting the process in place is yours
- Other mandatory training
- Health and safety and similar courses are not part of the platform
How it is delivered
-
Baseline the risk
One targeted simulated phishing email, sent without warning, shows who would have been caught and which kind of lure works on your team. The result is where the training starts, and nobody is named.
-
Enrol and brief
Every user enrolled through Microsoft 365, and the team told what the programme is, why it exists and that a click leads to a short lesson rather than a reprimand.
-
Roll out micro-training
Short episodes assigned on a schedule, starting with the scenarios the baseline showed matter most for your business, such as finance approvals, supplier changes and HR notifications.
-
Simulate, regularly
Simulated phishing kept current with what attackers are sending now, with anyone who clicks guided straight into the relevant lesson, and the results tracked by person and by lure.
-
Report and tighten
A short report after each round for managers: who improved, which lures still bite and where process should change, with the evidence ready for an insurer or a customer.
Why trust Odyssey with this
-
ISO
Certified to ISO 27001 for information security
-
In-house
All work completed by Odyssey employees, never subcontracted
-
3
Calls answered within three rings, and a director is always reachable
- Supporting North East businesses since 1987
Questions people ask
How long does the training take?
Lessons are short, a few minutes each, so staff fit them round their work rather than losing an afternoon, and they arrive on a schedule rather than all at once.
Why do simulated phishing emails?
They show who would have been caught in a real attack and which lures work on your team, so training can focus where it is needed and you can see the improvement in the next round.
Will staff feel tricked?
Not if it is done properly. Managers are told first, the team is told the programme exists, and anyone who clicks goes straight to a short lesson rather than being named.
Which training platform do you use?
Huntress security awareness training, delivered in short lessons alongside realistic phishing simulations, set up and reported on by our team.
Can managers see how the team is doing?
Yes. Reports show completion, who would have clicked in a simulation, who improved and which lures still work, so you can see where more training or a process change is needed.
Do insurers expect staff security training?
Increasingly, yes, and so do security standards and larger customers' questionnaires. The programme is designed to meet that expectation and the reports are the evidence, but check the exact requirements of your own policy with your insurer.
Does training replace email filtering?
No. Filtering stops most malicious email before the inbox; training is for the cleverest messages that get through. Together with endpoint and identity protection for the day someone clicks, they are the three layers we recommend first.
What does the programme change in practice?
Fewer clicks and fewer tickets, and usually one or two process changes, such as a second-channel check on any change to a supplier's bank details, which is where authorised push payment fraud is stopped.
Challenges this helps with
Related services
Ask about security awareness training
Send us your question and we will come back to you. We call back within the hour in office hours.
Rather talk? Call 01642 661888. Already a customer with a fault? Call the service desk on 01642 661800.
Please fill in every field marked *, then send again.
That email address does not look right. Please check it and send again.
We have had several messages from you in a short time. Please call us on 01642 661888 instead.
Online messages are paused for the moment. Please call us on 01642 661888.
Your message is too long for this form. Please shorten it, or call us.
Something went wrong on our side and your message was not sent. Please call us on 01642 661888.
We could not confirm that a person sent this message. Please try again, or call us on 01642 661888.
Talk to a human about security awareness training
Call and we answer within three rings. Or tell us what you need and we will call you back at any time.