DOZOR
Demo

Training and phishing simulations

An attack often starts with an email or a call to an employee. We run simulated campaigns, show where staff slipped and teach them to spot the signs of deception.

Discuss your taskAll services
Simulated phishing emailSample: the signs we cover in training
  1. FromIT Support <it-support@company-help.example>Outside domain
  2. SubjectUrgent: your password expires todayPressure
  3. Linklogin.company-help.exampleFake site
  4. AttachmentInstructions.pdf.exeDouble extension

An employee who reports the email gets the breakdown right away

What is included

Training sessions
In-person and online sessions on phishing, passwords, scam calls and handling data.
Simulated campaigns
Phishing emails modelled on real attacks: fake invoices, deliveries, password resets.
Calls
Checking how staff answer calls from “IT support” or “the bank”.
Executives
A separate session for management: payment fraud, swapped bank details, leaks.

Photos: AntanO, CC BY-SA 4.0; Nenad Stojkovic, CC BY 2.0; U.S. National Archives, public domain; Triple-green, CC BY 2.0, Wikimedia Commons.

Formats

How an exercise goes

  1. 01

    Scenarios

    We agree email topics, departments, timing and rules for the IT team.

  2. 02

    Campaign

    We send the simulated emails and record opens and clicks. Passwords entered on the training page are not stored.

  3. 03

    Breakdown

    An employee who falls for it sees right away which signs they missed.

  4. 04

    Training

    A session on the campaign results with examples from your own emails.

  5. 05

    Report

    Results by department and recommendations for the next round.

What you get

  • A report by department: opens, clicks, reports of the email.
  • Training materials you can reuse.
  • A staff memo in three languages.
  • An exercise plan for the next period.

Questions

Ask your own question
Will the exercise hurt relations in the team?

We agree the exercise with management and show results by department, without public lists. An employee who falls for it gets a breakdown of their mistake.

Do you store the passwords people enter?

No. The training page records only that something was entered. The passwords themselves are neither stored nor sent anywhere.

What language is the training in?

Kazakh, Russian or English, as the company chooses.

Discuss your task

Describe the task and the timeline. We will reply, clarify the scope and propose a plan.

  1. Contract. We start with a contract and a non-disclosure agreement. The scope of work and the permissions are put in writing.
  2. Scope. Goals, systems, timing and emergency contacts are agreed before the work starts.
  3. Work. We keep you updated as the work goes and report critical findings at once.
  4. Report. We hand over a management report and a technical report with evidence and recommendations.

Or write to us: info@dozorsecurity.kz

Request: Staff training