Skip to main content
Ian Job

Remote GRC service

Security Awareness Training for Small Business

A security awareness and training program for small and mid-sized businesses: baseline and role-based training, fair phishing simulations, policy acknowledgements and metrics leadership can track.

Send a request Works remotely. Available for consulting, contract and full-time engagements worldwide.

Most incidents start with a human decision. A good awareness program gives people practical habits, makes reporting easy and shows leadership whether behaviour is improving.

Ian designs and runs awareness programs sized for smaller organisations, built around your real risks rather than a generic course catalogue. Available as a consulting project, a fixed-term contract or as part of a full-time remote role, depending on what your organisation needs.

Who it is for

  • Small and mid-sized businesses without a structured awareness program.
  • Organisations that need training evidence for ISO 27001, SOC 2, GDPR or cyber insurance.
  • Finance, HR and admin teams targeted by invoice fraud and phishing.

What is included

  • Training needs analysis based on your incidents and risks.
  • Onboarding module and yearly refresher for all staff.
  • Role-based sessions for finance, administrators, developers and data handlers.
  • Phishing simulation plan with teach-at-click lessons.
  • Metrics dashboard: completion, report rate, time to report and repeat clicks.

How it works

  1. 1Assess. Review incidents, risks and existing training.
  2. 2Design. Build short, relevant modules for each audience.
  3. 3Deliver. Run live sessions, micro-lessons and simulations.
  4. 4Measure. Report behaviour trends to leadership and refresh the plan.

Frequently asked questions

How often should small business staff get security training?

At onboarding, with a yearly refresher and short monthly reminders or simulations in between.

What topics should security awareness training cover?

Phishing and payment fraud, passwords and MFA, safe data handling, acceptable use of AI tools, device security and how to report incidents quickly.

Free resources

Work together

Share your role, contract or project and Ian will reply by email to discuss scope and timing.

Go to the request form