* One allowlisting action by your IT team is required, and launch is subject to a security review of up to one business day.
Professional employee training
in information security and cyber awareness
Information security training, privacy protection, AI tools, training for directors, and onboarding for new employees - in person and remote
Our types of training
Professional training tailored to every organizational need
Information security training
Security Awareness Training
Professional training to raise employee awareness of cyber threats and information security. Covers recognizing phishing, social engineering, protecting sensitive information, strong passwords and organizational security procedures.
Key topics:
- Recognizing and handling phishing attacks
- Social engineering - how to recognize manipulation
- Strong passwords and two-factor authentication (2FA)
- Protecting sensitive information and preventing data leaks
- Safe use of email and the internet
- Organizational security procedures and incident reporting
Privacy protection training
Privacy & GDPR Training
Comprehensive training on privacy protection, GDPR, Israeli privacy law and the rights of data subjects. Intended for employees who handle personal and sensitive information.
Key topics:
- GDPR - the European data protection regulation
- Israel's Privacy Protection Law - requirements and updates
- Data subject rights - deletion, correction, access to information
- Handling data leaks and reporting to the authority
- Securing databases and protected storage
- Privacy by Design - designing systems with privacy in mind
AI tools training
AI Tools Training
Unique training for the safe, ethical and effective use of artificial intelligence tools in the organization. Covers ChatGPT, Copilot, Gemini and enterprise AI tools.
Key topics:
- Safe use of ChatGPT, Copilot, Gemini
- What must not be shared with AI tools - sensitive information and trade secrets
- The quality of AI answers - basic prompt engineering
- Security risks - data leakage, hallucinations, manipulation
- Ethical use of AI - copyright, originality, transparency
- Organizational procedures for AI use
Training for directors and managers
Board & Executive Training
Dedicated in-person training for the board and senior management on personal and legal responsibility for information security. Includes a tabletop exercise (TTX) for a cyber crisis.
Key topics:
- Directors' liability - legal, civil, criminal
- The due diligence duty in information security
- Managing cyber risk at board level
- Tabletop exercise (TTX) - a crisis simulation
- Real-time decision-making during a cyber incident
- Crisis communication and reporting to regulators
- Cyber insurance requirements - documentation that supports a conversation with the insurer
Onboarding training for new employees
New Employee Security Onboarding
Dedicated training for new employees on day one or in the first week. It covers all the topics of information security, privacy, AI and organizational procedures in a focused and efficient way.
Key topics:
- Information security procedures in the organization - what you must know
- Phishing and social engineering - common attacks
- Organizational tools and systems - safe use
- Privacy protection and sensitive information - basic procedures
- Using AI in the organization - what is allowed and what is not
- Reporting incidents and suspicions - to whom and how
Compliance training - ISO 27001, HIPAA, PCI-DSS
Regulatory Compliance Training
Dedicated training that supports part of the requirements of international information security standards (this is not a confirmation of full compliance with a standard). Intended for employees who access sensitive information under regulation - medical (HIPAA), financial (PCI-DSS) or ISO 27001 standards.
Key topics:
- ISO 27001 - the international information security management system
- HIPAA - protecting sensitive medical information (healthcare)
- PCI-DSS - securing credit card data
- Procedures for access to and use of sensitive information under regulation
- Reporting incidents and data breaches
- Data subject rights and access requests
- Documentation and audit - requirements for full compliance
Secure development training for developers
Secure Development & SDLC Training
Comprehensive training for software developers in the secure development lifecycle (SDLC) and secure coding. Includes the OWASP Top 10, dependency management, GPL licensing, and secure development techniques across the whole product lifecycle.
Key topics:
- SDLC - the secure development lifecycle, end to end
- OWASP Top 10 - the 10 most common vulnerabilities and how to prevent them
- Dependency management - checking the health and security of NPM, Maven and PyPI packages
- Open source licensing - GPL, MIT, Apache and the legal implications
- Secure code review - identifying vulnerabilities in code
- Secrets management - handling API keys, passwords and credentials
- Secure Coding Practices - Input validation, Sanitization, Encoding
- DevSecOps - integrating security into the CI/CD pipeline
Training formats
Choose the format that suits your organization
In-person training
A professional PhishingU team comes to your organization for an interactive session. It includes hands-on exercises, discussions, and real-time Q&A.
- Direct interaction with expert instructors
- Hands-on exercises and realistic scenarios
- Dynamic adaptation to the group's needs
- A shared experience and team building
Remote training
Online training on Zoom or similar webinar platforms. Interactive, practical and in real time - just like in person, but remote.
- Interactive training
- Suited to remote and dispersed employees
- Interaction, questions and exercises in real time
- Flexibility in scheduling
Hybrid training
A combination of in-person and remote - an initial in-person session + a follow-up on Zoom. The best of both worlds.
- Combining the advantages of both formats
- Continuous learning over time
- Optimal cost-effectiveness
- Suited to large organizations
Why choose PhishingU?
Professional training with real value
A team of experienced experts
Instructors with extensive experience in information security, privacy, AI and red team exercises
Up-to-date, relevant content
All training is updated regularly with the latest threats and technologies
Personalization for your organization
Every training is tailored to your industry, organization size and specific challenges
Measurement and tracking
Detailed reports on participation, understanding and improvement over time
Full support
Available for questions, coordination and updates throughout the training period
Documentation that helps meet part of the requirements
The training is documented and serves as evidence that helps meet part of the requirements of ISO 27001, GDPR, SOC 2 and cyber insurers. This is not a confirmation of full compliance
A completion certificate and official confirmation
Every organization that completes training with PhishingU receives a completion certificate and a detailed official confirmation. The certificate is evidence of awareness training that was carried out, which helps meet part of the requirements presented by insurers, customers and regulators. This is not a confirmation of full compliance with a law or a standard.
The certificate includes:
- The date of the training and the number of hours
- Topics covered - information security, phishing, privacy, AI
- The number of participants and the participation rate
- Scores and comprehension measures (if tests were carried out)
- An official PhishingU certificate to present to insurers and customers
- The validity of the certificate and recommended refresh dates
📋 Uses
Cyber insurance, customers, investors, regulators, ISO 27001, SOC 2, HIPAA
✅ Added value
Evidence of commitment, help with insurance and standards requirements, customer trust