Security Awareness Articles

Practical, jargon-free guides on phishing, business email compromise, social engineering and running a security awareness programme.

• What is phishing? A plain-English guide

  What phishing is, the forms it takes, and the habits that stop it, without the jargon.

• Business email compromise: how the “urgent invoice” scam works

  BEC rarely contains a link or attachment. Here is how it unfolds, and the one control that stops most of it.

• How to run your first phishing simulation (without upsetting anyone)

  A practical checklist for a first campaign that teaches people instead of embarrassing them.

• Reporting beats perfection: why the report button matters

  Nobody spots every phish. Teams that report quickly limit the damage when someone does click.