How to teach people to recognise attacks, what NIS2 and the Polish KSC Act require, and how to organise training in a company or a public office. We write based on what we see every day in our work.
Guide
What is MFA and how is it different from 2FA? Methods from SMS to passkeys, attacker tricks like push bombing and fake bank calls, and rules for all staff.
13 min read
Guide
What to teach your team about safe use of ChatGPT and other AI tools at work: which data to protect, shadow AI, hallucinations, prompt injection and AI policy.
11 min read
Guide
How to create a strong password, what length CERT Polska, NASK and NIST recommend, and what to put in a password policy for employees. With a team exercise.
12 min read
Guide
Social engineering at work: 8 attack techniques targeting employees, with examples, warning signs and responses, a recognition checklist and team exercises.
13 min read
Guide
What is a deepfake? Real business cases: a fake CFO on a video call, voice cloning, a ghost job candidate. Plus a procedure for verifying payment instructions.
13 min read
Guide
Cyber hygiene rules every employee can follow: parcel texts, fake invoices, MFA, AI. Each rule comes with a team exercise, plus a 12-month learning plan.
13 min read
Public sector
Cybersecurity training for local government in Polish municipal and county offices under the KSC Act: who to train, on what, how often and how to document it.
11 min read
Compliance
NIS2 training under Poland's amended KSC Act: annual training for the head of the entity, staff education, deadlines and the evidence to keep for an audit.
13 min read
