Vorpsel / Services / Advisory and training
Security training
Most attacks start with a person: a message opened, a password reused, a form trusted too much. We train each part of the company for the attacks it actually faces, live, with examples from your own sector.
At a glance
- For every employee, developers, IT and leadership
- Format live sessions, in person or remote, with hands-on exercises
- Content built from the attacks our team sees in real engagements
- Measured a short assessment before and after each track
One track for each room
A developer and a finance analyst are attacked in different ways. Each track speaks to one audience, about what that audience decides and touches every day.
Every employee
The whole company, including new hires
- Phishing and fake invoices
- Passwords and multi-factor login
- Calls and messages pretending to be IT
- Handling customer and personal data
- Working away from the office
- How and when to report
Short sessionsAround one hour, repeated for new hires.
Developers
Engineers, testers and technical leads
- Injection and cross-site scripting
- Authentication and session handling
- Access control between users
- Secrets in code and pipelines
- Dependencies and supply chain
- Reviewing code for security
Hands-onEach topic is exploited and then fixed in a practice application.
IT and operations
Infrastructure, support and cloud teams
- Hardening servers and workstations
- Cloud permissions and exposure
- Logs worth keeping
- Backups an attacker cannot reach
- The first hour of an incident
WorkshopsBuilt around your own environment and tools.
Leadership
Executives, directors and the board
- Security risk in business terms
- Decisions during an incident
- Ransom demands and extortion
- Communicating with customers and regulators
Crisis exerciseA realistic scenario played around the table, like the one below.
A crisis exercise, minute by minute
Leadership and the people who would be called sit together. We bring a scenario built for your company and release new facts as the clock moves. Nobody touches a system; what is tested is the decisions.
At the end you get a written report: what went well, what was missing and what to change in the response plan.
The first alert
Support receives calls: the order system shows files that cannot be opened.
The note
A ransom note appears on the servers, with a deadline and a price.
The leak
The attackers publish a sample of customer data to prove they have it.
The pressure
A journalist asks for a statement and a large customer wants to know if their data is safe.
Back to work
The company must open for business. What is restored first, and who decides?
How a program runs
Training once a year and forgetting about it changes nothing. A program runs in cycles, and each cycle starts from what the previous one measured.
Understand
We learn the business, the roles and the incidents you already had.
Build
We choose the tracks and adapt every example to your sector and tools.
Deliver
Live sessions and exercises, scheduled around the team's work.
Measure
The same short assessment before and after shows what changed.
What you keep
For the people
Material they can return to
Short guides for each track: how to recognize the attack, what to do and whom to call. Written for the audience, not for the security team.
For leadership
A report with the results
Attendance, the before and after assessment, what the exercises revealed and what we recommend for the next cycle. It also serves as evidence for audits and customer questionnaires.
Questions
Is it a recorded course?
No. Every session is live, with time for the questions people actually have. Recorded material only complements it.
Can it count for compliance?
Yes. Standards such as ISO 27001, PCI DSS and SOC 2 require security awareness training, and the report shows who was trained, on what and when.
How many people per session?
Awareness sessions can be large. Hands-on tracks and crisis exercises work best with small groups, so we split the audience when needed.
Do we need to use Vorpsel products?
No. The training is about attacks and decisions, and works with whatever tools you already run.
Other services
Tell us what you need.
We reply with a few questions about scope, then send a proposal with dates and price.