Security awareness training from OAC Technology costs $2 per user per month: short training episodes a few minutes long and realistic phishing simulations, delivered through the Huntress platform we manage for you, with a report each quarter. Onboarding takes about a week, and new hires are enrolled automatically.
Most successful attacks on small and mid-sized businesses do not start with a technical exploit. They start with an email that someone believed. Verizon’s annual Data Breach Investigations Report has found for years that roughly six in ten breaches involve a human element: a click, a reused password, a wire sent to the wrong account. Security awareness training is how that number comes down, and OAC Technology delivers it as a managed program rather than an annual slideshow.
We describe security as layers, like an onion: email filtering, firewalls, endpoint protection and 24/7 detection each catch what the layer before it missed. People are a layer too, and for many attacks the only one. No filter stops an employee from typing their password into a convincing copy of the Microsoft 365 login page, or from approving a fake invoice that arrived from a supplier’s compromised mailbox. Training does, when it is short, frequent and tied to what the attacks really look like.
Employees receive brief training episodes on a regular cadence, delivered through the Huntress security awareness platform we manage on your behalf. Episodes are a few minutes long, written for people who are not in IT, and assigned automatically to new hires.
Realistic simulated phishing emails go to your staff on a schedule, using the same lures attackers use: password resets, shared documents, invoices, delivery notices and messages that appear to come from the owner. Anyone who clicks gets a short, immediate lesson rather than a reprimand.
Who completed training, who clicked, which departments are improving and which lures still work. Reports are written for a manager, not a security analyst, and they double as evidence for auditors and insurers.
The goal is not zero clicks. It is a company where a suspicious email gets reported in a minute and our team can act on it. We set up the reporting path and respond to what comes through it.
Regular training with records is a requirement, not a nice-to-have, under most of the frameworks our clients live with. HIPAA’s Security Rule requires a security awareness and training program for the workforce. PCI DSS requires formal awareness training for personnel who handle card data. SOC 2 audits look for it. CMMC includes an awareness and training domain. Cyber-insurance applications ask directly whether you run phishing simulations, and the answer affects both premium and coverage. The program provides the training and the completion records each of these expects.
Training is most effective when the technical layers are in place around it, so that the one click that does happen is contained. Our managed cybersecurity services provide those layers, and Huntress managed detection and response watches endpoints and Microsoft 365 identities 24/7 for the moment a credential is misused. Companies that want ownership of the whole security program, including policy and leadership reporting, add our vCISO service.
Onboarding takes about a week: we import your users, set the training and simulation schedule, and send a short introduction so nobody thinks the first simulated email is a real breach. From there, employees see a brief episode on a regular cadence and a simulation between them. You receive a report each quarter, and we adjust the lures to whatever attackers are currently sending to businesses like yours.
Training is priced per user per month, and it is one of the least expensive controls in the stack. It is included in our Huntress managed security bundles; the Huntress pricing calculator gives an estimate, and we quote it alongside a flat-rate managed services plan or on its own.
A few minutes per episode, on a regular cadence. The program is designed to be absorbed between tasks, not scheduled as a meeting.
Not when they are introduced properly. We announce the program, keep the lessons immediate and blameless, and share results by team rather than by name unless you ask otherwise.
Yes. Small companies are targeted precisely because attackers assume nobody has trained them.
Yes. Completion and simulation reports are the evidence carriers ask for.
No. Built-in tools require someone to run them, keep them current and read the results. This is a managed program with a team behind it.
Episodes are a few minutes long and arrive on a regular cadence through the year rather than as a one-time course, with a phishing simulation between them.
No. The phishing quiz is ten sample emails you judge once, with the tells explained, and it is free. Security awareness training is the ongoing program: short lessons and realistic phishing tests sent to every employee through the year, with completion records for insurers and auditors, at $2 per user per month.
If your staff have never seen a simulated phishing email, the first real one is the test. Call 952-548-5558 or contact us to set up security awareness training for your team, on its own or as part of a managed security plan.
Not sure your team would spot one? Try our phishing quiz: ten emails, one at a time.
