To raise management awareness of the real impact of a cyber attack, Vanbreda offers an interactive cyber workshop. This session goes beyond traditional training by simulating a realistic incident and getting participants to think about the actual consequences for their specific company.
The focus extends far beyond the IT department:
- What happens when all the screens go black?
- How long can the company survive without access to customer or supplier data, the invoicing system, etc.?
- Which business processes are truly critical?
- Who has what responsibilities during the incident?
One point that is frequently heard is that it isn’t always clear which processes are the most critical. For a manufacturing company, for example, the loss of a planning tool may be a bigger disaster than the machinery shutting down, especially if perishable goods are involved.
A report with findings and recommendations is drawn up after the workshop. This gives management a practical starting point for developing an action plan and specifically increasing the organisation’s cyber resilience.
To mitigate the human risk for an entire organisation, our service specialising in Phishing as a Service (PaaS) focuses on raising awareness through realistically simulated phishing attacks, with the following goals:
- To drastically reduce the number of employees who click on a fraudulent link.
- To use reporting to identify those at greatest risk.
- To create a culture in which suspect messages are reported immediately and without any embarrassment to the IT department.
Vanbreda’s approach is designed to completely take care of this issue for the customer; apart from the simulations, it is of particular value in terms of:
- Support with technical configuration and setup.
- Quarterly check-ins to discuss results and progress.
- Additional customised reporting that focuses on the company’s specific structure and risks.
The effectiveness of this approach is clear. Companies find that their click-through rates, which often start at between 30% and 40%, drop to below 5% after a year of consistent training. This shows that collective alertness and a strong reporting instinct are the most effective defence.
The greatest added value lies in combining the strategic cyber security workshop with practical training through Phishing as a Service. The workshop builds support from management, while the simulations turn the strategy into a vigilant workplace culture.
For companies that want to get started on cyber security prevention, the message is clear: open an internal discussion about what to do in the event of an attack. This proactive approach is becoming increasingly essential in the insurance industry. Investing in prevention is a win-win situation: as well as reducing the risk of an incident, it protects business continuity and means that the company remains resilient and insurable. A single click can cost hundreds of thousands of euros. Training costs a mere fraction of that.