SUCCESS STORY
FM Conway strengthens cyber awareness with Boxphish
Overview
FM Conway, a leading UK infrastructure services provider and asphalt manufacturer, partnered with Boxphish to improve cyber awareness across its offices and operational sites. With critical operational systems and project data increasingly dependent on digital platforms, the company sought a solution that could enhance staff vigilance without disrupting day-to-day operations.
By implementing Boxphish, FM Conway has increased staff confidence, reduced cyber risk exposure, and embedded a culture of security awareness that protects both operational and administrative environments.
Challenge
FM Conway’s operations presented unique cybersecurity challenges:
Distributed workforce: Teams work across manufacturing plants, roadworks sites, and offices, making consistent training difficult.
Operational risk: Disruptions to fleet systems, machinery controls, or project data could delay construction schedules and impact client projects.
Data sensitivity: Production plans, project specifications, and supplier communications are critical for operational continuity.
Human error: On-site staff and office teams are exposed to phishing and social engineering attacks through digital communications.
Scalability: Training needed to cover a growing workforce across multiple sites while remaining practical and engaging.
Solution
The programme was deployed across all offices, manufacturing plants, and construction sites with minimal disruption. Staff complete bite-sized modules alongside regular phishing simulations, allowing them to practice spotting threats in a safe, realistic environment. Automated assignments maintain training coverage for new employees, keeping all teams aligned on cyber security best practices. Boxphish implemented a programme designed specifically for infrastructure and asphalt manufacturing operations:
Role-based modules: Interactive training for office staff, project managers, and on-site teams handling machinery and fleet systems.
Industry-relevant phishing simulations: Emails mimicking project updates, supplier requests, and fleet alerts helped staff practice spotting real-world threats.
Hands-on exercises and quizzes: Reinforced learning without interrupting day-to-day operations.
Automated onboarding: Ensured new starters were trained immediately across offices and sites.
Impact
The Boxphish programme delivered tangible outcomes for FM Conway:
01.
Company cyber risk score reduced from 5 (highest risk) to 2.
02.
Awareness of cyber threats extended to both operational and office environments, protecting machinery controls, project data, and supplier communications.
03.
Phishing simulation click rate reduced to 5% organisation-wide.
04.
195 courses completed by staff across all sites.
05.
Training integrated smoothly into workflows, fostering engagement without adding administrative burden.
Standout features
Short, practical courses designed for office and on-site teams.
Measurable improvements in threat recognition and cyber resilience.
Automated onboarding for all new staff.
Minimal administrative effort for IT and operations teams.
Realistic simulations based on infrastructure and asphalt manufacturing scenarios.
Future outlook
FM Conway will continue using Boxphish to maintain strong cyber awareness across its workforce. By embedding security into daily operations, the company ensures project continuity, protects critical systems, and safeguards both client projects and operational workflows from cyber threats.
KEEP UP TO DATE
See more case studies
Apr 9, 2026
Local Authority data breaches report: Q3 2025 (Nov 25 - Jan 26)
Apr 9, 2026
Retail data breaches report: Q3 2025 (Nov 25 - Jan 26)
Apr 9, 2026
Education data breaches report: Q3 2025 (Nov 25 - Jan 26)