IT Security
A finished security course for the whole organization

Does everyone need security training before year end? The course is finished and can go out this week.

A worked-through 40 to 50 minute course on phishing, passwords, multi-factor authentication and handling data and devices. Hands-on exercises where the learner has to spot the warning signs themselves, and a final test with a 75 percent pass mark. You decide who needs it, Zelo sends it out and documents that it was taken.

  • 22 screens, 40-50 minutes
  • Final test at 75 percent
  • Renews automatically
The problem

The requirement arrived before anyone had time to build the training

Security awareness usually falls between IT and HR. IT knows the subject but should not be building courses. HR knows training but not phishing. What you get is a slide at an all-hands that nobody can document afterwards.

  • An insurer, a customer or an auditor asks for documented security training, and you have meeting minutes.

  • The course you found is an hour of video that frontline staff never get through.

  • Even if everyone took it last year, nobody knows who has to take it again this year.

The content

What people actually fall for

Phishing, hands-on

The learner gets a convincingly built email and has to point out the warning signs themselves. Then the same on SMS and QR codes, which is where the attempts actually come from now.

Passwords, MFA and passkeys

Why reused passwords are the real problem, what multi-factor actually stops, and how passkeys work in practice.

Data and devices

What can be shared where, what happens when a phone goes missing, and how to handle documents outside the office.

Security culture

Why reporting a mistake quickly matters more than never making one. The part people remember afterwards.

Final test

Ten questions at a 75 percent pass mark. If the learner does not pass, the course can be retaken.

Tailored to your setup

The course is written around the tools people actually use, and can be adapted to your own reporting routines and contacts.

How it works

From order to documented completion

  1. Pick the course

    It is finished. No production time, no script rounds.

  2. Say who needs it

    Everyone, or a rule per department and role.

  3. Zelo sends it

    Email, SMS or Teams. People without a work email get it on their phone.

  4. Documentation accumulates

    Completion and test results are logged, and renewed next year.

The teaching

Exercises, not a video they click through

People do not learn to recognize phishing by having it explained. They learn it by seeing an email that looks right, and getting it wrong once somewhere safe.

  • Spot the warning signs yourselfThe learner clicks what looks wrong in a realistic email, and finds out why it was, or was not, a sign.
  • SMS and QR codes tooThe attempts have moved from the inbox to the phone and to stickers on parking meters. The course covers both.
  • Short screens22 screens across 40 to 50 minutes, broken up so it can be taken in two sittings without losing the thread.
  • A test that means somethingTen questions and 75 percent to pass, so a completion actually tells you something.
Documentation

The proof that it was done

Completion is the question you get after something has happened, or when a customer works through their supplier requirements. Knowing the course was sent is not an answer.

  • Status per personWho has completed, who has started, who has not opened it. Updated as it happens.
  • Test results storedThe result from the final test sits alongside the completion record.
  • CertificatesThe learner gets a certificate of completion, and you can export the whole log in one file.
  • Renewal next yearSet validity to twelve months and everyone is re-enrolled in the latest version without anyone following up.
Skip the call

Not ready for a demo? Get the price and a course outline by email.

Tell us how many employees need the course and we will send the price and an outline of what it covers, screen by screen. It comes back by email within one working day.

Number of employees

We use these details to reply to you, nothing else. Privacy

Protected by reCAPTCHA. Google’s privacy policy · terms

Objections

What managers ask first

How long does it take per employee?

Forty to fifty minutes, across 22 screens. Most people do it in one sitting, but the course remembers where they were, so it can be split without starting over.

Can we adapt it to our own routines?

Yes. The course is finished as a starting point, and parts of it can be rewritten to point at your own reporting routines and contacts. Faster than producing from scratch, and more useful than a fully generic course.

Some of our staff have no computer. Does it work for them?

Yes. The course runs in the phone browser and can be sent by SMS to people without a work email. Completion is recorded the same way as for everyone else.

We already have another system for courses. Can we use that?

The course can be delivered as a SCORM 1.2 package and run on the platform you have. You lose the automatic renewal and the follow-up, but the content is the same.

Does this replace our technical controls?

No. The course is about what people do, not about how the systems are configured. Most incidents still start with somebody clicking something, and that is the part this covers.

What does it cost?

The course is sold as its own module, priced on how many employees need it. Combined with HSE training and the rest of the platform there is a bundled option. We go through both in the demo.

Trust and security

From a vendor held to the same standard

  • ISO 27001 certified
  • SOC 2
  • GDPR
  • The course is live with customers today and can be delivered as a SCORM 1.2 package

See the course before you decide

Book a 30-minute demo. We walk the course screen by screen, show the phishing exercise, and set up a rollout to one department while you watch.

30 minutes · you get to see the whole course