Cyber · Phishing
Turn your people into your strongest control
A done-for-you phishing program: a live session tailored to your sector, then realistic phishing simulations every quarter, managed and reported by Connex.
Why it matters
One click is all it takes
Phishing is the most common way attackers get into a business, and a single click can mean wire fraud, ransomware or a lost week. Your software can’t stop the click. A trained team can.
The number-one way in
Phishing is the most common entry point for breaches at small and mid-sized organizations.
It starts with a person
Most incidents begin with someone clicking, replying or approving something they shouldn’t.
Your insurer is asking
Cyber insurers now expect awareness training and phishing simulations before they renew.
What’s included
A complete program, managed for you
We build it, run it and report on it. You get the session, the simulations, the materials and the proof.
Live training session
A 60 to 90 minute instructor-led session, tailored to your organization and the threats your team actually sees.
Quarterly phishing simulations
Four realistic, sector-tailored campaigns a year, with click and report tracking for every person.
Materials your team keeps
A pocket SLAM card, a one-page reference, and completion certificates for your file.
Plain-language reporting
A report each quarter: who clicked, who reported, and how your risk is trending.
Annual refresh
The full session re-delivered every year, so new hires are covered and the message stays fresh.
Insurance-ready proof
Documented completion and simulation results: the evidence insurers ask for at renewal.
How it works
A simple quarterly rhythm
Every quarter we run one realistic simulation and turn the results into coaching, not punishment.
Simulate
A sector-tailored phishing email goes to your team.
Click
Anyone who clicks lands on a calm teaching page. No blame.
Train
The moment becomes the lesson: spot it, pause, report.
Report
You get a clear report of clicks and reports.
Better every quarter. Scenarios rotate and get harder as your team gets sharper, and every result is documented for your insurer.
Built for your sector
Scenarios from your world, not generic spam
Each simulation is an original lure styled to your sector and your real vendors, because that’s what your team will actually face.
Public sector
Ministry notices, program eligibility and resident inquiries.
Municipal
Town and municipal notices tied to a deadline.
Accounting & finance
CRA correspondence, invoice-to-pay and attachment lures.
Legal
Documents to review and e-sign, filing and court-style notices.
Manufacturing
Purchase orders and supplier confirmations awaiting approval.
Your vendors
Lures built around the suppliers and tools your staff really use.
Every scenario pairs a believable sender with a non-punitive teaching page, and runs only with your written authorization.
One of five controls
Training is the easy first step
Insurers now look for five controls: awareness training, MFA, endpoint detection and response, patch management and backup. Phishing training is the quickest to put in place, and the rest is one conversation away. See how we approach security for enterprise & public sector and small business.
Get started
Three steps to a trained team
Free gap test
We run one simulated campaign and share a short, no-blame report.
Book the session
We schedule your live hour and tailor it to your organization.
Go quarterly
We handle the simulations and reporting from there.
One predictable annual fee covers the session, four simulations, materials and reporting, priced by headcount.
Already have an IT team or a support provider? Good.
We're built to work with them. We bring the design and delivery capacity for projects that need it, and leave day-to-day support with the people you already trust.