Cybersecurity › Security Awareness

The human factor is the number one risk.
Training is the first line of defence.

90% of successful cyber attacks begin with a human error: a click on a phishing link, a weak password, an attachment opened without verification. We train your team to recognise and neutralise threats before they become incidents.

Request a training programme What the programme includes

The human factor in numbers

Investing in technology without training people leaves the front door wide open. The data confirms that employee awareness is the single most decisive factor in preventing cyber incidents.

90%

Of successful cyber attacks involve a human error: phishing, compromised credentials or misconfigurations due to lack of training.

Companies with structured security awareness programmes experience three times fewer incidents than those without continuous training.

Art. 20 NIS2

The NIS2 Directive explicitly requires management bodies to undergo cybersecurity training and to promote it for all employees.

Our programme

What the Security Awareness service includes

A structured, ongoing programme combining theoretical training, practical exercises and measurable results. Every path is customised to the specific needs of the organisation.

Phishing simulation

Periodic simulated phishing campaigns replicating techniques used by real attackers. We measure click rates, reporting rates and improvement over time.

Social engineering tests

Targeted social engineering tests — vishing, pretexting, tailgating — to assess staff resilience against manipulation attempts that go beyond digital channels.

Tailored training

Training sessions adapted to role, department and risk level. From management to operations, every group receives relevant, immediately applicable content.

Continuous e-learning

E-learning platform with interactive micro-modules, videos, quizzes and real-world scenarios. Training distributed over time to maximise retention and minimise operational impact.

Reports and metrics

Dashboard with clear KPIs: phishing vulnerability rate, course completion, improvement trends. Concrete data to demonstrate programme effectiveness to management.

NIS2 compliance

Article 20 of the NIS2 Directive mandates compulsory cybersecurity training for management bodies. Our programme ensures documented compliance with this requirement.

Why our approach works

Continuity, not isolated events

A single training day per year does not change behaviour. Our programme is continuous: micro-sessions, periodic simulations and constant reinforcement that build secure habits.

Driven by real data

Every phishing campaign and every test generates measurable data. We adapt the programme based on actual results, focusing efforts where risk is highest.

Culture, not just compliance

The goal is not to tick a regulatory checkbox, but to build a security culture where every employee becomes an active line of defence against threats.

MIMIT Cloud and Cybersecurity Voucher 2026

This service is eligible for the voucher: a 50% non-repayable grant.

AtWorkStudio is an approved supplier. The grant covers 50% of the expenditure, up to €20,000, as a direct purchase or a subscription of at least 24 months. The application must be submitted before buying: drafting opens on 20 October 2026, submissions from 10 November 2026 to 20 January 2027, first come first served.

Codes to enter in the application

VCCFA2600000145-B9

Discover the voucher and check the requirements Check the requirements in 10 minutes, free, no registration (tool in Italian) →

Turn your employees into the first line of defence

Contact us to design a security awareness programme tailored to your organisation. Complementary to our free NIST assessment, which measures the overall maturity of your cybersecurity posture.

The human factor is the number one risk.Training is the first line of defence.