SVC-09 / Secure
Security Awareness Training
Short, role-aware training and simulated phishing that changes behaviour, with completion records you can hand to insurers and auditors.
What Security Awareness Training means in practice
Security awareness training teaches staff to recognise phishing, handle sensitive information and report problems quickly. We deliver brief monthly lessons, realistic simulations and a clear reporting path rather than an annual slide deck.
People are both the largest attack surface and the best sensor you have. Employees who know exactly what to do with a suspicious message - and feel safe reporting a mistake - shorten incident detection from days to minutes.
Problems this removes
- Annual training that staff click through without reading
- No data on who is most likely to click
- Staff afraid to report their own mistakes
- Insurers asking for training evidence
- New hires starting without security orientation
What you get
- Monthly micro-lessons of five minutes or less
- Simulated phishing with escalating realism
- Role-based modules for finance, executives and administrators
- Completion and risk-score reporting by team
- New-hire security onboarding
- Policy templates for acceptable use and remote work
Typical platforms and tools
01Handling your data responsibly
Access to your systems is controlled: named engineers, individual accounts, multi-factor authentication and an audit trail. We document where security awareness training data is stored, who can reach it and how it is retained or deleted. Our practices are designed with PIPEDA and BC PIPA in mind, and we align vendor selections with SOC 2-aligned providers wherever possible.
02Starting prices
As a guide, security awareness training is priced as a defined project from $2,500 or as part of a managed plan of $89 to $199 per user per month. vCIO retainers start from $1,500 per month and security assessments from $1,900. A 10% launch discount applies, 5% GST is added, and there is no lock-in. Call (604) 632-4959 or email info@SAZ.ca for a free 30-minute consultation and a fixed quote.
03How Security Awareness Training is delivered
Delivery begins with a 30-minute discovery call, followed by a short assessment of users, devices, applications, locations and existing contracts. We then prepare a fixed-price scope for security awareness training that lists outcomes, responsibilities, assumptions and exclusions. Implementation takes place in planned windows with a written rollback for each change. Once live, a stabilisation period lets us tune settings and train staff. Target: 95% training completion, click rate trending below 5%, report rate trending above 30% within two quarters.
04What happens in the first weeks
Early weeks focus on visibility and risk reduction. We inventory what exists, close the most urgent gaps and agree a plan for everything else. Staff receive short notices describing what will change, and leadership receives a first findings summary. By the end of the first month you will know the state of your security awareness training, what it will cost to improve and what outcome to expect.
05How we measure security awareness training
What gets measured improves. For security awareness training we agree a small set of indicators in advance and report them monthly or quarterly. General service targets apply as well: a 99.9% uptime target on managed services, a 15-minute response target for priority tickets and round-the-clock monitoring. If a target is missed, we explain why and what is being done.
06Part of a wider technology plan
Rarely does a single service stand alone. Security Awareness Training typically intersects with Hardware Procurement & Lifecycle, Office Moves & Cabling and IT Audits & Assessments, and we plan them together so that identity, devices, networks and data protection fit one design. Our vCIO team keeps the sequence in order, so budget is spent in the right order and every purchase supports the following one.
07Who Security Awareness Training is right for
Security Awareness Training suits Canadian organisations of 10 to 500 staff that want enterprise-grade discipline without an enterprise cost base. It is especially relevant to logistics & transportation, law firms and professional services teams, where the combination of regulated information, mobile workers and limited internal IT makes professional management of security awareness training worthwhile. If you already have internal IT staff, we can deliver it as part of a co-managed arrangement.
Frequently asked questions
Which tools and platforms do you use for security awareness training?
Typical platforms include Training platform, Simulated phishing, Policy templates and Reporting dashboards. We choose mainstream, supported technology that fits your existing licences and that you can keep if you change providers.
Can security awareness training be combined with our internal IT team?
Yes. We regularly deliver security awareness training alongside in-house staff through our co-managed model, with responsibilities documented so there is no overlap or gap.
How much does security awareness training cost?
Projects start from $2,500 and managed plans from $89 to $199 per user per month. vCIO retainers begin at $1,500 per month and security assessments at $1,900. A 10% launch discount applies and GST of 5% is added.
How long does security awareness training take to implement?
Small engagements can be completed in one to two weeks; larger rollouts are phased over four to eight weeks. We schedule work outside business hours and keep a rollback plan for every change.
Do we need to sign a long-term contract?
No. After onboarding the service is month to month with no lock-in, and you retain ownership of your documentation, configurations and data.