02 · Awareness
Cybersecurity Awareness & Training
Employees and stakeholders who understand cyber risk and best practice, so fewer incidents start with human error.
What’s included
Employee training programmes
- Tailored programmes for every level, from business users to IT teams.
- Phishing, passwords, social engineering, data protection and safe browsing.
- Content refreshed as threats evolve.
Phishing simulations & testing
- Simulated campaigns that measure susceptibility.
- Detailed reports with actionable insights.
- Targeted follow-up training for those who were caught.
Executive & board awareness
Briefings and workshops for C-suite executives and board members on governance, risk and their cybersecurity responsibilities.
Security for remote workers
- Securing home networks and personal devices.
- Safe, compliant remote working practices.
Specialised certification prep
Instructor-led or on-premises deep dives, Cybersecurity Essentials courses, and implementing frameworks such as NIST, NCA and SAMA.
Why traditional training fails
One long annual session that people click through. Generic content with nothing to do with local life. Blame when people make mistakes. No measurement of real behaviour. Read more in our article on security awareness training that works.
Our approach
- Short and regular
- Micro-learning of a few minutes, delivered often, so people remember.
- Local and relevant
- Scenarios from Saudi life: fake Absher, Tawakkalna or bank messages, fake delivery notices and government service emails.
- Bilingual
- All content in Arabic and English.
- Positive culture
- We reward people who report suspicious messages instead of punishing mistakes.
- Measured
- Behaviour is tracked over time so you can see real improvement.
Training for each role
- Executives
- Whaling, CEO fraud and deepfake voice and video scams.
- Finance
- Business email compromise and fake invoices.
- HR
- Fake CVs carrying malware, and personal data handling.
- IT and developers
- Secure coding and privileged access.
- Customer service
- Social engineering over the phone.
Metrics we report
- Report rate
- How many people report a suspicious message. The most important number.
- Phish-prone percentage
- How many people click on a simulation.
- Time to report
- How quickly the first report arrives.
- Repeat clickers
- Who needs extra support.
Why CYBRT
Riyadh-based, Gulf-focused
Headquartered in Riyadh, working with organisations across Saudi Arabia and the Gulf.
Certified consultants
Our team holds CISA, CISM, CRISC, CGEIT, CDPSE, CCSP, CCSK, COBIT and ISO 27001 Lead Auditor certifications, among others.
Regulation-ready
We work with NCA and SAMA frameworks alongside ISO, NIST and PCI-DSS, so controls map straight to what auditors expect.
End to end
Six connected services, from strategy and awareness through testing, operations, cloud and technology.
Frequently asked questions
What topics does the awareness training cover?
Phishing, password management, social engineering, data protection and secure browsing, tailored to business users and IT teams and refreshed as threats change.
Do you run phishing simulations?
Yes. We run simulated phishing campaigns, report on how staff responded, and give targeted follow-up training to anyone who was caught out.
Which certifications can you prepare our team for?
CISSP, CISA, CISM, GCCC, CDPSE, CRISC, CCSP, CCSK and ISO 27001 Lead Auditor, delivered instructor-led or on-premises.
How often should we train employees?
Short monthly or quarterly training with regular phishing simulations works far better than one session a year.
Will phishing simulations upset employees?
Not when handled well. We explain the programme clearly, never shame individuals and focus on learning.
Does awareness training meet NCA and SAMA requirements?
Yes. NCA ECC requires an awareness and training programme for all staff, and SAMA CSF requires awareness for employees and specialised training for key roles. Our reports provide the audit evidence.
Related services
Ready to protect your business?
Book your free security consultation today.