CISO toolkit · 6 formats to choose from

Internal awareness and e-learning, for your executives and teams.

Your teams are the last line of defence: the human element is involved in 62% of data breaches (Verizon DBIR 2026). Training the right people, on the right topics, at the right level, is the most measurable cyber investment. This page covers short internal sessions and the e-learning platform. For accredited professional certifications, see the dedicated page.

Six formats

Pick the format that fits your need.

Click on a format to start a conversation. We adapt duration, level and content to your business and your current maturity.

Executive awareness

2 h - on-site or video

Short session (2 h) for your leadership team. Concrete cyber stakes, personal liability (notably under NIS 2 and DORA), real-world examples in comparable organisations. Conversational format, no jargon, materials provided at the end.

Request a session →

Team training (on-site)

Half-day or full day - on-site

Half-day or full day on-site. Phishing, passwords, sensitive data handling, M365 or Google Workspace best practices, day-to-day incident handling. Tailored to your function (HR, finance, technical, front-desk...). Interactive quizzes and practical exercises.

Request a session →

Virtual classroom

60 to 90 min - remote

For teams spread across multiple sites or working remotely. Short live video sessions, same content as on-site, with live interaction. Ideal for regular refreshers.

Request a session →

Luxgap e-learning platform

Subscription - per user

Modular online tracks accessible to each of your employees. Auto-graded quizzes, internal certificates, compliance dashboard for your audits. Constantly updated with regulatory news and emerging threats.

Request a session →

Phishing exercises

Continuous - monthly report

Mock phishing emails sent at regular intervals to your staff. Those who click receive an instant micro-lesson. You get a monthly report: who clicks, which traps work, how overall vigilance evolves.

Request a session →

Crisis drill

Half-day - on-site

Half-day scripted drill on a realistic scenario (ransomware, data leak, prolonged outage). Your teams respond in real time, we observe strengths and weaknesses, we deliver a documented action plan.

Request a session →

Why train your teams continuously?

  • NIS 2 and DORA make cyber training mandatory for in-scope entities (initial training + ongoing).
  • GDPR requires staff training for those handling personal data (Article 32).
  • Cyber insurance now requires proof of ongoing awareness before underwriting coverage.
  • In case of incident, authorities assess the training effort when calculating sanctions.

Beyond the obligation, this is the most measurable cyber investment: every avoided click on a phishing email is a potential breach, downtime or ransom prevented.

Let's build your training plan together.

Combine formats based on your need: an annual executive session, continuous e-learning for all, monthly simulated phishing, and an annual crisis drill.

Build my quote →