Security Awareness Training — Workshops
Live workshops on phishing, social engineering, password hygiene, and safe data handling — demonstrated by the same team that runs the pen tests. Measurable behaviour change, not another annual slideshow.
What it is
A live, demonstration-driven security awareness workshop series — delivered in-person, virtual, or hybrid. We cover the attack techniques your employees actually face: phishing, vishing, smishing, credential harvesting, business-email compromise, physical social engineering, and data-handling mistakes.
What makes it stick is the live demos. Your employees watch a pen-tester spoof a Wi-Fi network, walk through a phishing kit, and demonstrate how a convincing pretext call unfolds. They leave with an intuition — not a compliance certificate.
Pair with our Phishing Simulation service to measure real behaviour change across 30 / 60 / 90-day windows. Workshop + sim together is the model most clients choose.
What this is not
Who this is for
What you get
- Tailored workshop design — content calibrated to your sector, risk profile, and team roles.
- Live delivery — classroom, virtual, or hybrid. 90 minutes standard; 45-min exec briefing and 1-day intensive available.
- Live demonstrations — Wi-Fi spoofing, phishing kit walkthrough, credential harvesting, pretext call flow (all in controlled scenarios).
- Role-tiered content — executives, finance, developers, general employees each get targeted modules.
- Attendance records and session summary — useful as compliance evidence.
- Reinforcement assets — printable quick-reference card, 6 pre-built phishing-sim scenarios for the 90 days post-workshop, manager conversation guide.
- Q&A themes report — what your team asked, what they misunderstood, and what to prioritise in future training.
How we deliver
Pricing
Published range
Per program. Single-session 90-min workshop starts at AED 8k; multi-wave role-tiered program for large populations up to AED 25k.
What drives the price:
- Number of sessions / waves
- Population size
- Role tiering (general vs. exec + finance + dev)
- In-person vs. virtual (travel)
- Add-on: phishing simulation bundle
Commercial terms
- Deposit: 50% at signing (smaller engagement)
- Net terms: Net-30
- Quote validity: 30 days
- Delivery lead time: 2 – 3 weeks typical
- Annual repeat: 15% returning-client discount
Your cert-backed team
Lead Trainer & Pen-Tester
Nelson Durairaj
OSCP · eJPT · CEH · BlackHat Linux · HTB Omniscient
Focus: Live attack demonstrations (Wi-Fi spoof, phishing kit, credential harvest), real-incident case studies, technical Q&A.
Supervising Practitioner
Manoj Prabhakaran
CPTS · CDSA · ISO 27001 Lead Auditor · GRC Mastery
Focus: Executive briefings, compliance-context framing (ISO 27001 / NESA / PDPL), manager-level discussions.
Frequently asked questions
Is this classroom or virtual?
Both. We deliver in-person classroom sessions at your UAE office, remote live virtual sessions via your preferred platform (Teams, Zoom, Webex), or hybrid. Most clients run a mix — live in-person for executive and high-risk teams, virtual live for larger population waves.
What language do you deliver in?
English today. Arabic-language delivery is on the 2027 roadmap with a named Arabic-speaking trainer; until then we can provide Arabic-translated slide decks for offline reinforcement.
How long is a workshop?
Standard format is 90 minutes per session. Executive briefings compress to 45 minutes. Full-day intensive available for security champions or IT teams (6 hours with breaks).
How is this different from an e-learning platform?
E-learning is click-through at scale and mostly forgotten within a week. Our workshops are live, demonstration-driven, and role-specific. Attendees remember the Wi-Fi spoof we ran in front of them — they don't remember slide 47 of a Learn-Management module. We're launching our own E-learning platform in 2027 to complement the workshops.
Do you combine this with phishing simulation?
Yes — that's the recommended model. Run a baseline phishing sim before training, deliver the workshop, run follow-up sims at 30 / 60 / 90 days. You get measurable click-rate change, not a feeling.
Who attends?
The workshop is designed for general staff but can be tailored. We often run 3 – 4 tiers: general employees, finance team (wire fraud focus), developers (secure coding awareness), and executives (whaling, board-level cyber).
Can you handle large populations?
Yes. We run wave-based delivery for organisations of 200 – 2,000+ staff. Each wave is 20 – 40 attendees for interaction quality. For 500+ populations a blended model (workshops + company-wide video + phishing sim) gives better coverage.
What do I get after the workshop?
A summary report of topics covered, attendance records (for compliance evidence), Q&A themes that surfaced, and a set of reinforcement assets: printable quick-reference card, 6 short phishing sim scenarios for the 90 days that follow, and manager conversation guide.
You might also need
Tired of annual training that doesn't change click rates?
Book a 30-minute scoping call. We can typically schedule workshops within 2 – 3 weeks. Written quote within 48 hours.
