The security program that's built around your people — not bolted on to them.
Click or Flick: Corporate is a human-led program that starts by understanding your organisation, then runs four reinforcing layers across a full year — all teaching one habit: stop, check, then act.
Real security starts with real understanding. So we start by getting to know your people.
It isn't a course. It's a program that adapts to your organisation.
Watching a video is one thing. Spotting a real attack on a busy Tuesday is another. We built this program to change what people actually do in the moment — because that's what keeps an organisation safe.
Click or Flick: Corporate is built around a simple conviction: understand the business first, then run four reinforcing layers — training, simulations, live sessions and human coaching — on one connected, twelve-month rhythm.
We start by understanding you.
This is what makes everything after it work. Before a single training module goes out, we do the human work of understanding your organisation, your people, and your real exposure.
"You can't change behaviour you haven't taken the time to understand. So we don't start with content — we start with a conversation."
Discovery & Conversation
We sit down with you to understand your business, your sector, your culture and what keeps you up at night.
Assess & Baseline
A baseline of knowledge, behaviour and role-based risk — so we know exactly where your people are starting.
Set Up Securely
NDA and contractual setup, platform provisioning, and the groundwork that keeps everything private and compliant.
Tailor the Program
The findings shape the year ahead — so what your people receive is built around your organisation, not a template.
Once it begins, four layers run together — every month, on one theme.
Here's what makes it work. It isn't one thing — it's four reinforcing layers running in parallel, all pointed at the same monthly theme. A person learns the topic, gets tested on it, hears an expert on it, and can get one-to-one help with it — all in the same month. That combination is what changes behaviour.
One theme a month. Four layers reinforcing it.
Read down: in any given month, all four layers are active at once — each one deepening the same lesson.
Self-Paced Course
Short, practical monthly modules on the month's theme. From Month 4 the depth adapts to each person's risk tier — fundamentals for those building confidence, governance-level depth for your champions — but everyone moves on the same topic.
Depth matched to each personPhishing Simulation
Safe, realistic simulations on the same theme as the training — so learning is immediately applied under real conditions. Difficulty and channel scale with the tier, and results feed the next month's focus.
Learn it, then live itLive Expert Session
One live session a month on that month's theme, delivered to the whole organisation at once. A real expert, a real conversation — and because it's delivered to everyone, no one is ever singled out by their risk tier.
Live, human, whole-organisationOne-to-One Coaching
Optional, private, and only ever employee-initiated. Anyone who wants direct human support can ask for it — including mentor pairings of stronger and developing colleagues. Never imposed, never public. It's the most human part of the program, and the one people remember.
Human support, whenever it's wantedA shared foundation first — then training that meets each person where they are.
One baseline for everyone
Every employee completes the same three foundational themes — building a shared language and a common standard before anyone is differentiated. These months also tell us how to tier from Month 4.
The same theme, three depths
From Month 4, the workforce is grouped into three behavioural risk tiers. The monthly theme stays shared across the organisation — only the depth and expectations change. Tiers are dynamic, private, and never publicly disclosed.
What a month inside the program actually looks like.
Take one theme — say, AI-powered deepfakes — and follow it through all four layers: the module, the simulation, the live session, and the coaching that's there if someone wants it.
It's the clearest way to see why four layers reinforcing one theme is what makes the lesson stick.
You're never left alone with a dashboard.
Running alongside all twelve months is the part that keeps it human: continuous measurement, real reporting, and a person who actually talks you through it.
Reporting & Feedback
Clear reporting on simulation and training results, tier movement, and progress over time — plus a quarterly Security Culture Scorecard for your board, with regular conversations, not just a portal login.
Privacy by Design
Risk tiers are never publicly disclosed. The monthly session goes to everyone, and coaching is opt-in — so no employee is ever exposed or singled out.
Refreshed Every Year
Themes are refreshed annually as the threat landscape moves — so the program stays current and the relationship keeps evolving with your risk.
It begins with a discussion — not a sign-up.
That's the whole point. Let's talk about your organisation, your people, and what teaching them to click or flick could do for your security culture.