Give us a call
Home|Tech Hub|Cyber Security|What to Expect from Our 90‑Minute On‑Site Phishing Awareness Training Session

What to Expect from Our 90‑Minute On‑Site Phishing Awareness Training Session

Share on socials

Cyber Security

Phishing remains one of the most common and effective cyber threats facing businesses today. While technology plays a vital role in protecting systems, many successful attacks still rely on one thing: human behaviour.

That’s why Corbel’s 90‑minute face‑to‑face phishing awareness training session is designed to empower people- not overwhelm them. The session focuses on practical awareness, confidence, and clear actions in a fun and interactive way that help teams spot and respond to phishing attempts before they cause damage.

Here’s what you can expect from the session and how it supports a stronger, more proactive security culture.

Our phishing awareness training is delivered in person at your workplace. By being on site, we can engage directly with your team, using examples to suit your environment, and create an open atmosphere where people feel comfortable asking questions.

This face‑to‑face approach helps move cyber security away from abstract theory and into something relatable, relevant, and immediately useful.

Phishing has evolved significantly and is no longer limited to poorly written emails or obvious scams. A key part of the session is helping people understand the language around phishing, so they know exactly what different threats look like in practice.

During the session, we clearly explain the six main types of phishing, breaking down the terminology and real‑world examples behind each one:

  • Basic phishing– common mass emails designed to trick recipients into clicking links or sharing information
  • Spear phishing– targeted attacks aimed at specific individuals or roles
  • Whaling– highly personalised attacks focused on senior leaders
  • Smishing– phishing delivered via SMS or messaging apps
  • Vishing– voice‑based scams using phone calls or recorded messages
  • Angler phishing– attacks carried out through social media or fake customer support accounts

We then explore real phishing techniques currently affecting businesses, including credential‑harvesting emails, fake Microsoft and login prompts, invoice fraud and payment diversion attempts, impersonation emails appearing to come from colleagues or suppliers, and increasingly convincing AI‑driven phishing content.

By seeing realistic examples and understanding the terminology behind them, teams quickly grasp just how subtle modern phishing attempts can be- and why awareness matters across every role, not just IT teams.

One of the core aims of the session is to help people move from uncertainty to confidence.

We break down the common patterns attackers rely on, such as:

  • Urgency or pressure to act quickly
  • Requests for passwords, codes, or payment changes
  • Small changes to email addresses or sender details
  • Unexpected links, attachments, or QR codes

Rather than asking staff to memorise rules or rely on guesswork, the training encourages a simple “pause and check” mindset that can be applied to everyday work.

As Corbel’s cyber security specialist Tom explains:

“One of the biggest misconceptions we still see is that phishing is easy to spot. The reality is that modern attacks are designed to look completely legitimate. Our goal isn’t to catch people out- it’s to give them the confidence to pause, question what they’re seeing, and know exactly what to do next.”

Tom, Cyber Security Specialist, Corbel

Awareness is only effective if people know what action to take.

The session clearly covers:

  • What to do if an email or message looks suspicious
  • How to report concerns internally
  • What not to do if a link has been clicked
  • Why reporting early matters- even if someone isn’t completely sure

A key part of our approach is removing blame. Creating a culture where staff feel supported to report concerns quickly helps reduce risk far more effectively than fear or punishment.

The training session is designed to be fun, engaging, and interactive, with regular opportunities for discussion, practical activities, and light‑hearted challenges. To encourage participation and reinforce key messages, we also include small prizes, helping to keep energy levels high and making the learning experience enjoyable as well as memorable.

The session is accessible for all levels of technical confidence and firmly grounded in real roles and real work. Research shows that interactive, face‑to‑face learning can improve knowledge retention by up to 30% compared to passive, lecture‑based training, particularly when learners are actively involved through discussion, problem‑solving, and collaborative activity. This fun and interactive approach consistently leads to very positive feedback, with teams finding the session informative, inclusive, and easy to engage with- without feeling overwhelmed by technical detail.

Our phishing awareness training is suitable for:

  • Small and medium‑sized Suffolk businesses
  • Teams with mixed levels of technical experience
  • Organisations working towards Cyber Essentials
  • Businesses looking to strengthen their cyber security culture through awareness

Phishing awareness is most effective when everyone who uses email, messaging platforms, or shared systems understands the risks and their role in preventing them.

Technology will always be an important part of cyber security- but people remain one of the most critical layers of defence.

By the end of the 90‑minute session, your team will:

  • Better understand how modern phishing attacks work
  • Feel more confident recognising suspicious activity
  • Know exactly how to respond
  • Play an active role in protecting the organisation

The result is a calmer, more informed team and a stronger, more resilient security culture.

If you’d like to learn more about Corbel’s face‑to‑face phishing awareness training or discuss delivering a session for your organisation, please get in touch with our team.

The session is delivered as a 90‑minute, face‑to‑face workshop at your premises. This gives us enough time to cover modern phishing techniques in depth, while keeping the session focused, engaging, and practical for attendees.

The training is designed for anyone who uses email, messaging apps, or shared systems as part of their role. This includes finance teams, admin staff, HR, senior leaders, and customer‑facing employees. No technical background is required.

Yes. The session is deliberately people‑focused and jargon‑free. We concentrate on awareness, behaviour, and simple decision‑making rather than technical detail, making it accessible for teams of all technical confidence levels.

Absolutely. The training uses real‑world phishing examples based on attacks currently affecting businesses. Seeing realistic scenarios helps attendees recognise how convincing modern phishing attempts can be and builds confidence in spotting them.

This session is about education and awareness- not catching people out. While we do include an interactive, quiz‑style element (using a Kahoot‑style fastest‑finger‑first format to keep things engaging and fun), the focus is always on learning together rather than testing or blaming individuals.

We deliberately avoid scare tactics and instead create a supportive, relaxed environment where people feel comfortable taking part, asking questions, and building confidence as a team.

The format works well for small groups through to larger audiences. We’ve delivered sessions to both smaller teams and groups of over 150 people, adapting the delivery style to suit the audience size and setting.

Leave Corbel a Google Review
Remote support