Cyber & IT security awareness training
Keep best practice cyber advice front of mind with regular, bite-sized training modules.
Boost organisation wide cyber resilience
Enrol your employees onto automated learning journeys that deliver regular video based training that is simple to understand and easy to digest. A short quiz or game follows every 3 to 5 minute training video prompting employees to put into practice what they have learnt; proven to maximise information retention.
Our training content follows best-practice cyber awareness and IT security advice and is updated regularly to include the latest guidance. Our training modules cover the full breadth of cyber security awareness and IT security topics including, but not limited to, ‘how to spot phishing’, ‘malware’ and ‘staying safe online’, through to ‘social engineering’, ‘fraud’, ‘GDPR’ and ‘data privacy’.
Educate your team on new threats with cyber security awareness training
Short educational training courses coupled with real world phishing simulations ensure your users are up to date and aware of the latest threats.
Through working closely with a leading email security partner who secure over two million endpoints globally, we gain real time insight into cyber attack trends. This enables us to keep our library of phishing simulations and cyber security awareness training content relevant and educating users on the latest threats.
Video and quiz based training maximises information retention
Gone are the days of infrequent, lenghty, face-to-face cyber training sessions. Not only are they ineffective, but the information is soon forgotten.
Video-based content that is to-the-point and less than 5 minutes long, is an efficient way to educate users and maintain high levels of awareness and understanding across your organisation. This bize-sized training content, coupled with quizzes and gamification is not only proven to boost information retention, but positively influence security behaviours.
Allow users to access training at any time, on any device
Whether at the office, on the move, or working from home, all training content can be accessed any time, on any device.
Our platform has been designed with users in mind. Single sign on and a completely responsive design ensures accessing the Boxphish portal and completing training is quick and simple, and does not impact the working day.
FEATURES
Keep your team vigilant against the latest threats with relatable, engaging training content
Snippet sized, trackable video training
Cyber security education has transformed with snippet sized, trackable video training. These bite-sized videos deliver essential knowledge in an engaging format, ensuring information is grasped and retained. With robust tracking, organisations can effortlessly monitor employee engagement and progress, gaining insights to enhance their security posture.
Minimum % pass threshold
A minimum pass threshold ensures that employees who demonstrate a strong understanding of cyber security concepts successfully complete the training. By setting a clear benchmark, organisations can be confident that their teams possess the necessary knowledge to protect against threats. This approach not only promotes higher standards of learning but also reinforces a culture of accountability and vigilance.
Customise content to match organisational requirements
Custom settings allow you to tailor the awareness training experience to match your organisation's unique needs. Whether adjusting the pace, content style, or frequency of delivery, a customisable approach ensures that the training resonates with your team. Adapt the learning environment to suit your organisation, fostering a more engaged and informed workforce.
Multiple training styles
We offer flexible training content styles to fit your needs, including engaging animated modules and dynamic live-action videos. Our animated content makes complex security concepts easy to understand with clear visuals, while our live-action videos bring real world scenarios to life.
EXPLORE
Product features
All the features you need to raise awareness and strengthen your cyber security posture.
Seamless user sync
Boxphish integrates with both Google and Microsoft Office 365 for seamless user syncing and management.
Single sign on
Single sign on means portal access is quick and simple, allowing users to access training efficiently whilst at their desk or on the go.
Phish report button
Allow users to report suspected phishing emails and cyber-attacks with ease directly from their inbox.
Automation
Automated learning journeys mean you can set and forget, with the confidence your employees are getting the training they need.
On-demand
For those wanting to be a little more hands on, on-demand allows you to set up and send simulations and training on an adhoc basis.
Custom content
For customers with bespoke content requirements, we can completely customise training to suit your needs.
PROVEN SOLUTIONS
Loved by users, backed by G2
FAQ
What is cyber security awareness training?
Cyber security awareness training is a structured education programme that teaches employees how to recognise, avoid and respond to digital threats such as phishing, malware, social engineering and data breaches. Boxphish delivers this through bite-sized video modules and simulated phishing attacks that build long-term behavioural change.
Why is cyber security awareness training important for businesses?
Over 90% of successful cyber attacks begin with human error. Training reduces that risk by turning employees into an active line of defence, helping organisations meet compliance obligations such as ISO 27001, Cyber Essentials and GDPR while protecting reputation and revenue.
How often should cyber security awareness training be delivered?
Best practice is little-and-often: short monthly modules combined with continuous phishing simulations. Boxphish recommends a rolling 12-month curriculum so knowledge stays fresh and behaviours are reinforced rather than forgotten after a single annual session.
What topics should cyber security awareness training cover?
Effective programmes cover phishing, password hygiene, multi-factor authentication, social engineering, remote working, removable media, physical security, data protection, incident reporting and AI-driven threats such as deepfakes.
How do you measure the effectiveness of cyber security awareness training?
Measure click rates on simulated phishes, report rates, course completion, knowledge-check scores and time-to-report. Boxphish dashboards visualise human risk scores per user, team and department so leadership can prove ROI and demonstrate risk reduction over time.
Is cyber security awareness training a legal requirement in the UK?
While not always a standalone legal requirement, it is mandated indirectly under GDPR, the DPA 2018, NIS Regulations, FCA guidance and many sector-specific frameworks. Auditors and insurers increasingly expect documented, ongoing training as evidence of due diligence.
How long does cyber security awareness training take?
Boxphish modules are typically 3-5 minutes long, designed to fit around busy workdays. A full annual curriculum totals around 60–90 minutes per user, spread across the year for maximum retention.
What is the difference between cyber security awareness training and compliance training?
Compliance training proves a box has been ticked; awareness training changes behaviour. Boxphish blends both - meeting auditor requirements while genuinely reducing the likelihood of a successful attack.
Can cyber security awareness training be tailored to different roles?
Yes. Role-based training is essential because finance, IT, HR and executives face different threats. Boxphish offers role-specific pathways such as executive whaling defence, finance invoice fraud and developer secure-coding awareness.
How much does cyber security awareness training cost?
Pricing is typically per user per year and scales with headcount. Boxphish offers transparent SME and enterprise pricing that includes unlimited phishing simulations, the full course library and reporting - request a tailored quote for your organisation size.
KEEP UP TO DATE
See our latest cyber resources
Aug 18, 2026
Your checklist for the 2026 Cyber Security Breaches Survey
Aug 18, 2026
Your guide to the 2026 Cyber Security Breaches Survey
Apr 9, 2026
Local Authority data breaches report: Q3 2025 (Nov 25 – Jan 26)