CyberSafe for Business: staff training
A 6-academic-hour cyber-safety course for your office staff, held at your office or a venue we agree on.
CyberSafe for Business is a private cyber-safety awareness course for groups of up to 20 employees. Over 6 academic hours we cover the threats hitting companies in Estonia in 2026: CEO fraud (the 'CEO' urgently asks for a transfer), invoice fraud (a fake supplier sends an invoice with different bank details), email account takeover, ransomware, and staff awareness in line with GDPR. The longer format leaves time for exercises for each department. On the day we also set up a pilot phishing simulation and walk the whole team through your incident-response plan. We come to your office, or we agree on a separate training room.
Who it's for
- Companies with 5–500 employees that are responsible for their team's awareness
- Finance and accounting departments (transfers, invoices)
- Sales and customer service teams (email, customer data)
- IT and management teams that need awareness training in line with GDPR
- Public sector bodies and local governments
What you'll know after the course
- Staff recognise how CEO fraud and invoice fraud work
- The finance team knows how to check every transfer through a second channel
- Sales and service staff know what to do with suspicious emails
- The company has documented proof of GDPR-aligned awareness training
- The help desk gets noticeably fewer 'I clicked the link' calls
- Every employee gets a personal certificate
Syllabus
Introduction: how companies in Estonia are being attacked in 2026
- Real scam cases from Estonian companies, 2024–2026
- What costs the most right now: CEO fraud, ransomware or invoice fraud
- How a scam usually reaches your company
CEO fraud and invoice fraud (core module)
- The 'CEO' urgently asks for €24,700 to be transferred
- A fake supplier sends an invoice with a changed account number
- AI-cloned voices and deepfake video calls
- The four-eyes principle: how to make it work in practice
Protecting email and accounts
- Signs of a phishing email: DKIM, SPF, spoofed sender names
- Security settings in Microsoft 365 and Google Workspace
- Two-factor authentication for the whole team
- What to do when an account has been taken over
Customer data and GDPR
- How to handle requests about customer data
- What counts as a personal data breach and when to notify AKI
- Employees' obligations under GDPR
Practical exercise: role play
- 'The CEO needs an urgent transfer': finance practises
- 'A customer asks for a password': customer service practises
- 'A contractor has sent an invoice': accounting practises
- Each department gets its own scenario
An incident-response plan for your company
- Checklist for the first 60 minutes after an incident
- Internal escalation: who calls whom
- Templates for messages to customers and partners
- The AKI notification form and deadlines
- Reviewing the incident afterwards and learning from it
Phishing-simulation pilot and audit trail
- How to choose your first phishing-simulation tool (KnowBe4, Hoxhunt, free options)
- Setting up the first campaign on site
- Reading the results: when there is a problem and when there is not
- Audit trail: which documents to show in an ISO 27001 or GDPR audit
- How often to repeat the training: quarterly or yearly
What's included
- 'CyberSafe Employee' certificate for every participant
- A company certificate as documented proof of the training
- A 30-minute follow-up Q&A with the trainer by email or Zoom
- Held at your office or a venue we agree on
- Materials adapted to your sector (finance, sales and so on)
Other CyberSafe courses
- Adults
CyberSafe Cyber-Safety Course for Adults
Two academic hours built on real cases. You leave knowing how to protect yourself and your family.
Read more - Children 9–14
CyberSafe Cyber-Safety Course for Children
We learn through games and real-life situations. Your child goes home knowing how to stay safe online.
Read more - Family · private
CyberSafe for Families (private)
Four academic hours for your family only, at your home or another place that suits you, at a time that suits you.
Read more
Ready to submit a request?
Send us a request and we'll reply within 24 hours with a quote and payment details.