Home/Services/Staff security training

Staff security awareness and social engineering testing

In most breaches nobody broke a firewall. A person was tricked. Staff are the weakest link in any organisation and also the cheapest to strengthen. We train your team in plain language, then safely test them.

from £1,000starting price
Message us on WhatsApp
Three colleagues looking at a laptop together during security awareness training

See it in 30 seconds.

A short cartoon with a voice-over and captions that shows the problem and how we solve it. Press play and turn your sound on.

Read the transcript

Cartoon transcript for Employee Security Awareness & Social Engineering Testing: the problem is shown first, then how Cyber Multimedia Solutions fixes it step by step. In most breaches nobody broke a firewall. A person was tricked. Staff are the weakest link in any organisation and also the cheapest to strengthen. We train your team in plain language, then safely test them.

What this service is

Social engineering is the art of manipulating people into giving up access: a fake invoice, a call from “the bank”, a message from a “colleague”, a link that looks right. Technology rarely stops it, because the person is the one who clicks.

Our programme has two parts. First, practical training that your staff can follow without technical background. Second, authorised simulations, including phishing emails and pretext calls, run with your written permission and agreed rules, so you see where the real gaps are before a criminal does. The aim is learning, not blame.

You may need this if

  • Your staff handle money, client data or sensitive systems.
  • You have had a scam email, fake invoice or impersonation incident.
  • A bank, regulator or client asks for evidence of staff training.
  • You want to know how your people would react to a real attack.

How it works

  1. Scope and permission

    We agree what will be tested, who is informed and the rules of engagement in writing.

  2. Train

    Short practical sessions on spotting scams, handling requests for money or data, and reporting incidents.

  3. Test

    Authorised phishing and pretext simulations tailored to your organisation.

  4. Report and coach

    A results report showing patterns and gaps, then follow-up coaching and a simple security policy.

What you get, what to expect, and what we need from you

Deliverables

  • Jargon-free staff training sessions
  • Authorised phishing and pretext simulations
  • A results report showing where the gaps are
  • Follow-up coaching
  • A short, practical security policy

Limits we tell you upfront

  • We test only with written authorisation from your organisation.
  • Results show risk at a point in time. Training works best when repeated.
  • We do not publish individual staff results beyond those who need them.

Your part

  • Provide written authorisation from someone with authority.
  • Tell us which systems and people are in scope.
  • Agree how staff who report the test will be thanked, not punished.

Where we work: based in Kampala, Uganda, serving clients across Uganda and East Africa on site where needed, and remotely for international clients.

Common questions

Will staff be embarrassed or disciplined?

That is not the aim. Results are used to improve training. We agree who sees what in advance.

Is it legal to test our own staff?

With written authorisation from the organisation and agreed rules, yes. We do not test without it.

How long does a programme take?

It depends on staff numbers and scope. We agree the schedule at consultation.

Do you also test our systems?

See our penetration testing service.

Tell us what happened. We will tell you what is possible.

A £100 consultation, credited to your invoice if you go ahead. Prices start from £1,000.

Contact details
Popular request