Professional services
Live sessions online or onsite, an executive briefing, or a one-off phishing simulation with a report and recommendations.
Book a training session
Security awareness trainingYour people will be targeted. Make them hard to fool.
Training that changes how people respond to phishing, scams and social engineering. Delivered by our consultants online or onsite, or on the platform you already use, and measured with phishing simulations.
- SENTSimulated supplier invoice to all staffLive
- CLICKEDOpened the linkCoaching
- REPORTEDReported to IT with the report buttonGood
- TRAINEDShort module assigned to people who clickedAssigned
Illustrative example · Train, test, measure
- ISO/IEC 27001 certified
- SMB1001 Gold
- Nueva 24x7 SOC
- In house digital forensics and incident response
- CREST Registered Testers in our team
- ARN Innovation Awards: SMB Partner of the Year 2024 and 2025
The challenge
One click can undo every other control.
Many attacks still start with a person: a convincing email, a fake invoice, a call that sounds urgent. Annual training videos tick a compliance box, but rarely change what people do on a busy afternoon. And when training and phishing tests are run separately, nobody can show whether either is working.
of breaches worldwide involve a person: a click, a reply or a simple mistake.
of cyber incident breaches reported in Australia began with phishing, the most common cause.
How Nueva helps
Train, test, measure, repeat.
- 01 Train
- 02 Test
- 03 Measure
- 04 Repeat
We build a program around how your organisation works. Our consultants run live sessions online or onsite, and we run ongoing training through KnowBe4, Proofpoint, Abnormal AI or Wizer. Phishing simulations show who is at risk and what to focus on next. Already running your own simulations? We build the training from your results.
Spot the phish
Could your team spot all five?
An example of the kind of email we use in training. Select each warning sign to see why it matters.
From Accounts Team
Subject
Hi,
Please note
Thanks,
Accounts
Warning signs found0 of 5
Select something suspicious
Look at the sender, the subject, the request, the link and the attachment.
Lookalike sender. The domain uses the number 1 in place of the letter l. Check the address, not just the display name.
Pressure and urgency. Deadlines and late fees are there to rush you past your normal checks.
Changed bank details. A request to pay a new account is the classic invoice fraud. Confirm by phone, using a number you already have.
Link that goes elsewhere. Hover before you click. The text says invoice, but the address points somewhere you don't recognise.
Unexpected attachment. An HTML file posing as an invoice often opens a fake sign-in page to steal your password.
Illustrative training example. Not a real organisation.
What we do
Training people remember, and evidence you can show.
- Live sessions, online or onsite. Facilitated by Nueva consultants and tailored to your organisation, roles and risks.
- Executive and board briefings. How attackers target leaders, and the questions directors should ask.
- Platform training. Short, regular modules through KnowBe4, Proofpoint, Abnormal AI or Wizer.
- Phishing simulations. Realistic campaigns that show who clicks, who reports and where to focus.
- Training from your own results. Already running simulations? We design the training around your reports.
- Role-based modules. Finance, executives, IT administrators and front-of-house staff face different attacks.
- Physical security awareness. Tailgating, visitor management and challenging strangers on site, with Nueva Secure.
- Reporting for audits and insurers. Completion and simulation records you can use as evidence for ISO/IEC 27001, SMB1001 and insurance questionnaires.
Nueva CyberProfessional services Managed service
A project or a partnership. Your call.
Book a session, or keep us on to run your awareness program.
Managed service
A managed program on KnowBe4, Proofpoint, Abnormal AI or Wizer. We assign training, schedule simulations, report the results and adjust the program as risks change.
Talk about a managed programHow it works
How it works
STEP 01 OF 06
Outcomes
What changes for you.
- Staff who recognise and report suspicious messages
- Training evidence ready for auditors, insurers and customers
- Effort focused on the people and roles most at risk
- Physical and digital awareness covered together
One team across three practices
- Nueva CyberTraining, simulations and reporting
- Nueva TechnologyEmail protection and phishing report buttons set up for your people
- Nueva SecureTailgating and visitor awareness on site
FAQ
Questions buyers ask us.
Still deciding? Talk to a security specialistCan we use our existing training platform?
Yes. We work with KnowBe4, Proofpoint, Abnormal AI and Wizer, and can run the program on the platform you already have.
We already run phishing simulations. Can you still help?
Yes. We can design and deliver the training based on your own simulation results.
Is training online or onsite?
Both. Our consultants run live sessions online or at your sites, and platform modules fill the time in between.
Does training help with ISO/IEC 27001 and SMB1001?
Both expect staff security awareness. We provide completion and simulation records you can use as evidence.
Cyber incident happening now?+61 2 7252 5678
Call our incident team any time. If we can't answer straight away, leave a message and a responder will call you back as soon as possible.