--- title: "Cyber Security Training: how to train your staff" description: Cyber security is an issue for businesses of all sizes, from dealing with repeated phishing attempts to navigating the Mandatory Data Notification laws, businesses need to be on their toes. Having great security software is a good first step, but it does not guarantee your safety. image: https://blog.strategicgroup.net.au/hubfs/woman%20pc.jpg --- [![Strategic Group](https://blog.strategicgroup.net.au/hs-fs/hubfs/SGRP%20Logo%20-%20Inverted%20white.png?width=2951&name=SGRP%20Logo%20-%20Inverted%20white.png "Strategic Group")](https://www.strategicgroup.net.au) - [Home](https://www.strategicgroup.net.au/) - [About](https://strategicgroup.net.au/about/) - [Careers](https://strategicgroup.net.au/careers/) - [Services](https://strategicgroup.net.au/services/) - [IT Support & HelpDesk](https://strategicgroup.net.au/it-support-helpdesk/) - [Cloud Computing](https://strategicgroup.net.au/cloud-computing/) - [Private Cloud](https://info.strategicgroup.net.au/vault-demo) - [Public Cloud](https://strategicgroup.net.au/public-cloud-computing/) - [Cyber Security](https://strategicgroup.net.au/cyber-security/) - [Security & Risk Audit](https://info.strategicgroup.net.au/cyber-security-audit) - [Staff Training](https://info.strategicgroup.net.au/email-security-training) - [Telecommunications](https://strategicgroup.net.au/unified-communications/) - [Unified Communications](https://strategicgroup.net.au/unified-communications/) - [Microsoft Teams Calling](https://strategicgroup.net.au/ms-teams-calling/) - [Strategy & Planning](https://info.strategicgroup.net.au/virtual-cio) - [IT Consulting](https://info.strategicgroup.net.au/virtual-cio) - [Business Continuity Planning](https://info.strategicgroup.net.au/business-continuity) - [Disaster Recovery Planning](https://strategicgroup.net.au/disaster-recovery/) - [Device as a Service](https://info.strategicgroup.net.au/strategic-group-device-as-a-service) - [IT Projects](https://strategicgroup.net.au/it-project-services/) - [On-site & Hybrid Servers](https://www.strategicgroup.net.au/on-site-servers/) - [Case Studies](https://strategicgroup.net.au/case-studies/) - [Insights](https://blog.strategicgroup.net.au/) - [Blog](https://blog.strategicgroup.net.au/) - [Resources](https://strategicgroup.net.au/resources/) - [Contact](https://strategicgroup.net.au/contact/) - [1300 857 048](tel:1300857048) ![Strategic Group Blog](https://blog.strategicgroup.net.au/hs-fs/hubfs/apple-computer-desk-96858.jpg?width=2000&name=apple-computer-desk-96858.jpg "Strategic Group Blog") # Strategic Group Blog #### Everything you need to know about IT and technology #### [Tips](https://blog.strategicgroup.net.au/topic/tips) [Security](https://blog.strategicgroup.net.au/topic/security) # [Cyber Security Training: how to train your staff](https://blog.strategicgroup.net.au/cyber-security-training-how-to-train-your-staff) ![close](https://cdn2.hubspot.net/hubfs/2432204/AK-UI%20Builder/close-button.svg) ### Categories - [News (76)](https://blog.strategicgroup.net.au/topic/news) - [Tips (71)](https://blog.strategicgroup.net.au/topic/tips) - [Security (44)](https://blog.strategicgroup.net.au/topic/security) - [Productivity (13)](https://blog.strategicgroup.net.au/topic/productivity) - [Technology (7)](https://blog.strategicgroup.net.au/topic/technology) - [AI (5)](https://blog.strategicgroup.net.au/topic/ai) - [Community (2)](https://blog.strategicgroup.net.au/topic/community) - [Insider (1)](https://blog.strategicgroup.net.au/topic/insider) - [Uncategorised (1)](https://blog.strategicgroup.net.au/topic/uncategorised) ### Subscribe to Email Updates ### Popular Stories [The Essential 8 Guidelines for Business: What You Need to Know](https://blog.strategicgroup.net.au/the-essential-8-guidelines-for-business-what-you-need-to-know) Mar 18, 2025 [Embracing AI in the workplace in 2025](https://blog.strategicgroup.net.au/embracing-ai-in-the-workplace-in-2025) Mar 24, 2025 [Top tech gifts to buy this Christmas](https://blog.strategicgroup.net.au/top-tech-gifts-to-buy-this-christmas-0-1-0) Dec 11, 2024 [Social Engineering Red Flags - What to look out for](https://blog.strategicgroup.net.au/social-engineering-red-flags-what-to-look-out-for) Oct 21, 2022 [How much is IT costing your business?](https://blog.strategicgroup.net.au/how-much-is-it-costing-your-business) Jul 10, 2018 Categories | Subscribe | Populars - - - - Written by Emily Gam on February 05, 2019 Cyber security is an on-going issue for businesses of all sizes, from dealing with repeated phishing attempts to navigating the [Mandatory Data Notification](https://blog.strategicgroup.net.au/mandatory-data-breach-notification-what-you-need-to-know) laws, businesses need to be on their toes. Having great security software like anti-virus and anti-spam is a great first step to protecting your business, but it does not guarantee your safety. Truth be told, no business is 100% protected from the bad guys or simply human error but there are things you can do to mitigate these risks, especially when your biggest liability is actually your staff. A report last year found that employees actually performed worse in 2018 than in 2017 when measuring cyber security awareness. This included knowing how to spot a phishing email, identifying malware warning signs and general social media safety. #### **Why is cyber security training important** Businesses of all sizes and industries are targets for hackers, whether they are trying to extort money, install malware or steal data. It’s becoming easier for hackers to gain access to personal information with data breaches published on the dark web, along with already built [‘hacking packs’](https://blog.strategicgroup.net.au/the-ransomware-market-has-exploded-2502-in-12-months) meaning you don’t even have to be highly technical minded to be a hacker now. The good news is that you can actually prevent around 80% of data breaches by implementing standard security measures and training. #### **How to train staff in cyber security** A formal cyber security plan can be included in your overall IT or [Technology Strategy](https://blog.strategicgroup.net.au/5-reasons-you-need-a-technology-strategy). A formal, documented plan for cyber security will mean that staff have a process to follow if such an incident arises. Are your staff using outdated computers? Are all software patches up to date? Is new software compatible with your current hardware? Addressing these type of questions in your cyber security plan will allow you to see where there may be risks in your business. Staff need training to pick out [red flags](https://blog.strategicgroup.net.au/social-engineering-red-flags-what-to-look-out-for) and the techniques that hackers use to encourage people to give up valuable information. It doesn’t matter how great your security software is or how much you spend, all it takes is one misplaced click on an email and your whole system can be compromised. | ![microsoft scam-1-450708-edited](https://blog.strategicgroup.net.au/hs-fs/hubfs/microsoft%20scam-1-450708-edited.png?width=941&name=microsoft%20scam-1-450708-edited.png) | | --- | | *Example of a phishing email* | Communication is key to improving cyber security in your business. Making sure, you continually remind staff of best practices and reaffirm the importance of the cyber security training they are undertaking will help get all departments on board. By letting staff know when there are [scam emails](https://blog.strategicgroup.net.au/would-you-be-fooled-by-these-phishing-emails) floating around it reminds them how prevalent these scams are and highlights the different ways a hacker can gain access. As part of your formal plan, it is worthwhile including a [Disaster Recovery Plan](https://info.strategicgroup.net.au/disaster-recovery-plan-template) in the event that the worst-case scenario does happen. #### **How to test your cyber security** It’s one thing to implement cyber security strategies, it’s another to make sure they are actually working and protecting your business. One of the best ways to test that your staff training is working, is to actually phish your own staff. This tip may sound counter intuitive but there are real benefits to testing your staff with different social engineering techniques. Regularly [sending simulated phishing emails](https://info.strategicgroup.net.au/phishing-security-test) to employees reinforces their security training and keeps them on their toes with security top of mind. Companies that have implemented white hat phishing and training have seen a significant drop in staff clicking on compromised emails. You can also employ a technique called penetration testing that performs a fake attack on your business to identify how hackers could get into your system and how far they could go without detection. This allows you to identify weaknesses and plug them before visitors that are more malicious discover them. [![Free User Phishing Test](https://hubspot-no-cache-ap1-prod.s3.amazonaws.com/cta/default/1726473/b18ee902-c230-41ff-bea9-e3c11b89ba74.png)](https://hubspot-cta-redirect-ap1-prod.s3.amazonaws.com/cta/redirect/1726473/b18ee902-c230-41ff-bea9-e3c11b89ba74) ![Subscribe](https://cdn2.hubspot.net/hubfs/2432204/99%20Template%20Pack/Background%20Images/message.svg "Subscribe") ### Subscribe to Email Updates ### Let Us Know What You Thought about this Post. Put your Comment Below. ### You may also like: [Tips](https://blog.strategicgroup.net.au/topic/tips) [Security](https://blog.strategicgroup.net.au/topic/security) [Technology](https://blog.strategicgroup.net.au/topic/technology) ## [The Essential 8 Guidelines for Business: What You Need to Know](https://blog.strategicgroup.net.au/the-essential-8-guidelines-for-business-what-you-need-to-know) In today's digital age, cyber threats are an ever-present danger for businesses of all sizes. In response, the Australia... [Tips](https://blog.strategicgroup.net.au/topic/tips) [Security](https://blog.strategicgroup.net.au/topic/security) ## [No Place Like Home: Ensuring Cybersecurity for SMEs in the Remote Work Revolution](https://blog.strategicgroup.net.au/no-place-like-home-ensuring-cybersecurity-for-smes-in-the-remote-work-revolution) The rise of remote work in today's business environment creates unique opportunities, but also significant challenges fo... [Tips](https://blog.strategicgroup.net.au/topic/tips) [Security](https://blog.strategicgroup.net.au/topic/security) ## [Building a Phishing-Proof Business](https://blog.strategicgroup.net.au/building-a-phishing-proof-business) With their alarming simplicity and devastating effectiveness, phishing attacks continue to pose a significant threat to ... ![](https://cdn2.hubspot.net/hub/2432204/hubfs/99%20Template%20Pack/newsletter_bg.jpeg?width=2000&name=newsletter_bg.jpeg) ## Get all updates straight to your inbox. Stay informed with the latest IT and Technology news. ### Subscribe to Email Updates [![Strategic Group](https://blog.strategicgroup.net.au/hs-fs/hubfs/Logos/SGRP_Final_Logo.jpg?width=700&name=SGRP_Final_Logo.jpg "Strategic Group")](https://www.strategicgroup.net.au) We wanted to be more than just a simple ‘break-fix’ IT provider, and become a true partner that understands our clients’ business drivers and goals so we can provide relevant IT solutions that enable our clients to grow & achieve their goals ##### SERVICES - Cloud Computing - [Helpdesk](https://www.strategicgroup.net.au/help-desk/) - IT Consulting ##### COMPANY - [About](https://strategicgroup.net.au/about/) - [Careers](https://strategicgroup.net.au/careers/) - [Case Studies](https://strategicgroup.net.au/case-studies/) ##### CONTACT Suite 5, 101 Hannell Street WICKHAM  NSW  2293 Phone: [1300 857 048](tel:1300857048) © 2018 All Rights Reserved