Security Awareness Training for Northern Indiana Businesses

Yes, when it is short, regular and realistic. A once-a-year hour-long video changes nothing. Monthly five-minute lessons plus simulated phishing emails that look like the ones your staff actually receive — the fake invoice, the "are you at your desk?" from the boss, the shared-document link — measurably reduce the click rate within a few months, and the people who click get a lesson in the moment, not a lecture later.

Carriers typically ask whether all employees receive security-awareness training at least annually and whether you run phishing simulations. HIPAA requires workforce training with records; CMMC and the FTC Safeguards Rule require it too. We provide the training and the records — who completed what, when, and the simulation results — so the answer is a documented yes.

Not if it's done right. We introduce the program openly, never shame individuals, keep results private to management in aggregate, and treat a click as a teaching moment with a short, immediate lesson. Staff generally come to appreciate it — the same emails arrive for real, and recognizing them protects their own bank accounts too.

The ones we see most: invoice-redirect fraud (a vendor's "new bank details" email), executive impersonation asking for gift cards or a wire, fake Microsoft 365 login pages sent as shared documents, payroll-change requests to HR, and phone calls claiming to be from the bank or from Microsoft. Our training uses local, current examples rather than generic stock scenarios.

About five minutes a month per person for the lessons, plus a few seconds to delete or report a simulated phish. New hires get a 20-minute onboarding session. The goal is a habit, not a course.

Yes, and specifically. Accounts payable, payroll, anyone who can change bank details or approve a wire gets additional training on business-email-compromise fraud and a simple verification procedure — a call-back on a known number before any payment change — that stops the majority of these losses outright.

Management receives a quarterly summary: completion rates, simulation click and report rates over time, and which departments need attention. Individuals who click repeatedly get additional coaching, not a write-up.

Per user per month, and it is included in our managed IT agreements. It is also available on its own for businesses with another IT provider that need the training and records for insurance or compliance.