In short: Managed security awareness training is a done-for-you service: we run a baseline phishing test, choose the right platform from the vendors we supply, set it up, schedule training and simulations for the year, enrol new starters and send reports to your board and insurers. You approve the plan and get the results without the admin.
Why a managed service
Most security awareness programmes do not fail because of the platform. They fail because nobody has time to run them. The first campaign goes out, the second is late, new starters are never enrolled, and by the time the insurer asks for evidence, the reports show a programme that stopped six months ago.
A managed service fixes the ownership problem. You keep the decisions; we do the work. It suits:
- Organisations without a dedicated security team
- IT teams who already have more than enough to manage
- Leaders who need dependable evidence for insurers, auditors or a regulator
- Organisations in sectors with specific expectations, such as schools and academy trusts, healthcare and law firms
What is included
- Baseline phishing test before any training, so you have an honest starting point
- Platform recommendation from the vendors we supply, based on your email platform, licences, users and budget
- Set-up: directory sync from Microsoft Entra ID or Google Workspace, allow-listing, report button, branding and single sign-on where available
- A 12-month calendar of short modules and varied simulations, agreed with you in advance
- New starters and leavers handled automatically through directory sync, with a first-week induction
- Targeted follow-up for repeat clickers and higher-risk roles, always supportive rather than punitive
- Quarterly reporting for the board, insurers and auditors, with trends and recommendations
- An annual review of content, difficulty and goals
The detail of the plan follows our guide to building a security awareness training programme.
Who does what
| Task | You | Us |
|---|---|---|
| Agree goals, audiences and calendar | Approve | Propose and document |
| Platform licensing | - | Supply and manage the licences |
| Set-up and integrations | Grant admin consent | Configure and test |
| Simulations and training | Optional sign-off on themes | Build, schedule and send |
| Staff communications | Send a short launch message from leadership | Draft it for you |
| New starters | - | Automatic through directory sync |
| Reports | Share with the board or insurer | Produce quarterly, with commentary |
| Reported phishing | Act on real incidents with IT | Highlight trends and lessons |
Simulations are run ethically: staff are told that tests happen (not when), clickers get a short lesson rather than a telling-off, and we avoid lures that would cause real distress. That follows the NCSC's advice not to stigmatise mistakes, and it protects trust. See building a positive security culture.
Choosing the platform for you
Because we are vendor-independent, the platform is chosen to fit you, not the other way round:
- Microsoft 365 E5 or Defender for Office 365 Plan 2 customers may already have Attack Simulation Training
- Sophos Central customers can add training in the same console; see our Sophos page
- Proofpoint Essentials or Hornetsecurity email customers can pair awareness with their email security; see Proofpoint Essentials Security Awareness and Hornetsecurity Security Awareness Service
- Organisations wanting the deepest automation and human risk features often suit usecure, HacWare or Breach Secure Now
- A one-off expert-run exercise, such as an executive spear phishing test, may suit the Bitdefender Phishing Simulation Service
All the options are on the vendors hub and in the platform comparison.
Reporting that boards and insurers can use
Our quarterly report is written for non-specialists. It shows:
- Training completion by team, with overdue modules
- Simulation results: click, credential-entry and report rates, and time to first report
- Trends since the baseline, not one-off numbers
- Repeat clickers (anonymised for the board) and the support they received
- Recommendations for the next quarter
These are the measures we explain in measuring security awareness training effectiveness, and they map to the evidence insurers ask for in security awareness training for cyber insurance.
Get started
We usually start with a baseline phishing test and a short discovery conversation by email or video meeting to understand your environment. Pricing depends on users, term and the platform chosen, so ask us for a quote.
Contact us to arrange your baseline test.
How Forever Systems runs your awareness programme
We are vendor-independent. We compare the security awareness and phishing simulation platforms that suit your size, sector, Microsoft 365 licensing and existing security tools, recommend one, then run it for you so training and phishing tests actually happen month after month.
- Baseline phishing simulation to see where you start
- Platform selection and set-up, with single sign-on and automatic user sync from Microsoft Entra ID or Google Workspace where the platform supports it
- A year-round plan of short training modules, simulated phishing campaigns and policy sign-off, including new-starter induction
- Sector and role content for schools, charities, healthcare, legal, finance, public sector and high-risk roles such as finance teams and help desks
- Reporting for the board, auditors, insurers and Cyber Essentials, showing completion, reporting and click trends
- Joined-up defences: email security, MFA, endpoint protection and dark web monitoring so training is backed by technology
Forever Systems Ltd provides IT and cyber security services to UK organisations. Pricing depends on user numbers and platform, so ask us for a quote.
Want help choosing and running security awareness training?
Tell Forever Systems what you need and we will come back to you by email with options, not a hard sell.
Contact usFrequently asked questions
What is managed security awareness training?
A service where a provider runs your security awareness programme for you: platform choice and set-up, scheduling training and phishing simulations, enrolling new starters, chasing completion and producing reports for the board and insurers.
How much work is involved for us?
Very little. You approve the plan, send a short launch message to staff and receive quarterly reports. Directory sync means new starters are enrolled automatically.
Can you use the platform we already have?
Often, yes. If you already license a platform we supply, such as Microsoft Attack Simulation Training through Microsoft 365 E5, we can run the programme on it rather than adding another product.
Will staff know the phishing emails are tests?
They will know that simulations happen as part of the programme, but not when. Anyone who clicks sees a short, friendly explanation of the warning signs, and reporting is always recorded as a success.