Staff training · Sydney, Melbourne and remote
Cyber Security Awareness Training
The attack reaches your people first. Make sure they’re ready.
Live, story-led cyber security awareness training for employees, from Ahmed Khanji of KhanjiCyber and Gridware’s ethical hackers. Training your staff will actually remember.
Try it · 30 seconds
Scam or legit?
Four messages your staff could get this week. Call each one, then see why. It’s the kind of judgement our sessions build.
4 messages
-
Your parcel is on hold. A $2.99 redelivery fee is unpaid. Pay within 24 hours or it will be returned to sender.
parcel-redelivery-au.com/pay
Show answer
Scam
Delivery companies don’t text payment links. A tiny fee is a way to collect your card details, and the deadline is there to rush you.
-
Your payslip for October is ready. Log in to the HR portal the usual way to view it. We never send links or attachments with payslips.
Show answer
Legit
Nothing to click, nothing urgent, and it tells you to go the usual way. That’s what a safe message looks like. If in doubt, open the portal yourself rather than from a link.
-
Hi, we’re migrating your mailbox tonight. You’ll get a 6-digit code on your phone in a minute. Can you send it to me so I can finish the setup?
Show answer
Scam
A one-time code is the key to your account, and real IT staff never need it. Attackers trigger the code themselves, then ask you for it.
-
Please note our bank details have changed. Use the attached details for this month’s invoice. Our office phone is down this week, so please reply by email.
Show answer
Scam
The address can be real if the supplier’s mailbox has been hacked. New bank details plus a reason you can’t call is the classic invoice scam: verify on a number you already hold.
Illustrative messages. Senders and links are made up.
Who runs your session
Taught by people who do this for real
Ahmed Khanji
Founder & CEO, Gridware · creator of KhanjiCyber
Explains scams and cyber risk in plain language to 300K+ followers on Instagram and TikTok. Runs executive briefings, keynotes and all-staff sessions on request, subject to availability.
Gridware’s ethical hackers
1,000+ security engagements a year
Our trainers are certified in ethical hacking and run real phishing, social engineering and penetration tests, so every example comes from the field rather than a slide deck.
Play video from 18:27: 60 Minutes Australia, Computer Says No: how AI decides who gets hired As seen on 60 Minutes Australia
Computer Says No: how AI decides who gets hired
KhanjiCyber is Ahmed’s personal education channel. Training engagements are delivered by Gridware.
Free to watch Play video: How Criminals Just Stole $36 Million With a Phone Call A real case
One phone call. US$36.3 million.
A CEO lost US$36.3 million in four days to a deepfake voice call. In this free awareness video from his KhanjiCyber channel, Ahmed Khanji explains how it worked and three controls to put in place now.
Cases like this are the backbone of our sessions, retold for your business, your payment processes and the scams targeting your industry.
Why it matters
Most awareness training doesn’t stick
Attackers target people because people are the easiest way in. Phishing, social engineering and ransomware usually start with human error or someone being tricked, and increasingly through a trusted supplier whose email has already been compromised. When technical controls miss an attack, your staff are the last line of defence. Good security awareness training gives employees the skills to spot those attacks and the confidence to report them.
68% of breaches involve a person: a click, a reply, a mistake.
Typical compliance training
- A click-through module once a year
- Generic, overseas examples
- Success measured by completion rates
- The same content for every role
Gridware awareness training
- Live sessions that tell the story of a real attack
- The scams currently hitting Australian organisations
- Success measured by changed behaviour: reporting and phishing results
- Tailored to your systems, policies and the people most likely to be targeted
The program
Security awareness training that fits your organisation
Every security awareness training program is customised to your business, from a single all-staff session to an ongoing program with phishing simulation and regular updates. We run it in person in Sydney and Melbourne, or online for teams anywhere in Australia over Zoom or Microsoft Teams.
-
Staff workshops
Interactive sessions for all employees, onsite or over Teams and Zoom, built around the attacks your industry is actually seeing.
- With Ahmed Khanji
Executive and board briefings
A plain-language briefing for leaders on deepfake fraud, payment redirection and the decisions they will face in an incident.
- With Ahmed Khanji
Keynotes and town halls
Ahmed presents to your whole organisation, the same story-first style as KhanjiCyber, tailored to your business.
-
Phishing simulation
Realistic simulated phishing campaigns that map where your people are most at risk and give you a baseline to improve on.
-
Webinars and short courses
Remote sessions and short courses that keep training going between workshops, with regular updates as threats change.
-
Online assessment and reinforcement
Online assessments, a certificate of completion where you need one, plus posters, email advisories and staff recognition to make it stick.
- For leadership teams
Cyber war gaming
For leadership and technical teams who are ready for more: a live, adversarial simulation where you make real decisions under pressure as the attack evolves, followed by a debrief and report.
What the training covers
- Phishing and email scams
- Deepfake voice and video fraud
- Invoice and payment redirection
- Social engineering
- Passwords and MFA
- Malware and unsafe attachments
- Safe browsing
- Device security and privacy
- Your policies and responsibilities
Results
Measured by behaviour, not completion
Changed behaviour is the real measure of success, and it is best tracked over time.
- Phishing baseline
- A simulated campaign before training shows where you start, and repeat campaigns show the change.
- Reporting rate
- We compare how often staff report suspected threats before and after training. Reporting is the behaviour that matters most.
- Evidence for audit
- Attendance records and certificates of completion support your compliance and insurance obligations.
Beyond the classroom
Awareness is step one
Staff who spot an attack are the start. The next question is whether your leaders and responders know what to do in the first few hours. We help you build all three levels.
- 01
Awareness training
Every employee learns to recognise and report an attack before it lands.
You are here - 02
Tabletop exercise
Leaders and responders talk through an incident scenario and test the response plan.
Tabletop exercises → - 03
Cyber war game
A live, adversarial simulation where technical and executive teams make decisions under pressure as the attack evolves.
Cyber war gaming →
Questions and answers
Cyber security awareness training FAQs
Updated .
What is cyber security awareness training for employees?
It is training that teaches employees how cyber attacks work, how to recognise them and what to do when they see one. Most breaches start with human error or a person being tricked, so it is one of the most effective controls you can put in place.
What does the training cover?
Phishing and email scams, social engineering, deepfake voice and video fraud, invoice and payment redirection, ransomware and malware, passwords and MFA, safe browsing, device security, and your own policies and responsibilities. Each program is tailored to the threats your industry is seeing.
Can Ahmed Khanji present to our staff?
Yes. Ahmed runs executive briefings, keynotes and all-staff sessions on request, subject to availability. Other sessions are delivered by Gridware’s trainers, who are certified in ethical hacking and use the same story-first approach.
How often should staff do security awareness training? Is annual training enough?
A single annual module is rarely enough. We recommend quarterly touchpoints, such as sessions, phishing simulations or advisories, so staff keep up with new scams and best practice between yearly refreshers.
Do you offer online cyber security awareness training?
Yes. We run live online workshops and webinars over Zoom, Microsoft Teams, Google Meet or whichever platform you prefer, plus short courses and online assessments, as well as in-person sessions.
Do you deliver training outside Sydney and Melbourne?
Yes, online. Live online sessions work for teams anywhere in Australia, including Brisbane, Perth and Adelaide. In-person sessions run in Sydney and Melbourne.
How much does cyber security awareness training cost?
It depends on the number of staff, the formats you choose and whether you add phishing simulation. Contact us and we will put together a quote for your business.
Is security awareness training suitable for small businesses?
Yes. The program was designed with small and medium-sized businesses in mind and is customised to the size and needs of each organisation.
Do employees get a certificate?
Where your organisation needs evidence of training, we provide a certificate of completion.
How do you measure whether the training worked?
With phishing simulations before and after, and by comparing how often staff report suspected threats. Awareness training is about changing behaviour, which is best measured over time.
Book training
Give your team the session they’ll talk about
Tell us who needs training, roughly how many people and when. We’ll come back with a recommended program and a quote.
Thanks.
Your request is with our team. We’ll be in touch to plan your session and send a quote.