How a 2-Person IT Team Achieved 95% Training Completion and %%Zero Phishing Incidents%%

The company previously relied on antivirus, anti-malware, and firewalls to protect systems. Staff training on phishing was minimal, and employees often clicked links without thinking. “Training staff was pretty non-existent,” says Mark. “People would quite happily click away on links.”

About five years ago, a penetration test confirmed the company’s vulnerabilities. At the same time, their insurance provider required evidence that staff were trained and aware of cybersecurity risks. That led to a referral to Phishing Tackle.

The business has now worked with Phishing Tackle for around five years, and the managed service model continues to stand out as a perfect fit for their lean IT team. It automatically runs phishing simulations, delivers training, and provides reports to store managers and HR. Mark explains, “We didn’t really have time to do anything ourselves… It is the ideal fit for us.” 

The program now runs almost entirely automatically, from phishing simulations to report generation, leaving only a monthly review meeting as the main ongoing effort. Training has also been added to HR policies as a compliance requirement, ensuring staff participation. 

Each month, store managers and HR receive clear, automated reports showing who has completed training, who clicked links, and who needs follow-up.