Phishing is no longer full of mistakes
Fraudulent messages can now look like ordinary communication from a colleague, supplier, bank or company management. Employees learn to spot warning signs even when an attack looks convincing.
[ Corporate cybersecurity training ]
A safer company starts with employees' everyday decisions
Most attacks do not start by breaking through technology, but with a convincing email, a weak password or a carelessly shared file. We teach your employees to recognise risky situations and respond appropriately, clearly, practically and without unnecessary scare tactics.
[ The human factor ]One wrong decision can
One wrong decision can
bypass even well-configured security
Attackers know that the easiest way into a company is often through a person rather than technology. They exploit stress, time pressure, trust and everyday working habits. Yet employees do not need to be security specialists to assess most of these situations correctly.
A password alone is not enough
Weak, reused or improperly stored passwords make it easier for attackers to access company accounts. We show participants how to protect their logins without unnecessarily complicated rules.
Company data can leave unnoticed
Misconfigured sharing, a public link or a personal device can expose sensitive information to people who should not see it.
The risk does not end at the work computer
An attack can arrive through a mobile phone, social network, fake online shop, QR code or fraudulent payment. That is why the training uses situations employees actually encounter.
Safe habits are best established from the start
New employees arrive with different experience and working habits. The training helps companies establish consistent ground rules for safe behaviour during onboarding and reduces the risk of newcomers bringing unsuitable practices from their previous workplace.
[ Training outcomes ]
Employees will know what to look for and what to do
They will recognise suspicious communication
Click to learn more →They will be able to identify typical signs of phishing, manipulation and other scams, in email and beyond.
← BackThey will secure their accounts
Click to learn more →They will understand how to use passwords, password managers and multi-factor authentication, and why a password alone may not be enough.
← BackThey will handle data more safely
Click to learn more →They will learn to share files correctly, use cloud services and check who retains access.
← BackThey will respond appropriately
Click to learn more →They will not have to guess what to do with a suspicious message, an unexpected request or a possible incident.
← Back[ Audience ]
For employees who use email, the internet, a phone or company data at work
The training is designed for everyday users across the company. Participants do not need technical knowledge or previous cybersecurity experience.
[ Suitable for ]
- Administrative and operations staff
- Sales and customer service teams
- HR, marketing and finance
- Staff using company email and cloud services
- Team leaders
- New employees during onboarding
- Other groups working with company accounts, devices or information
[ Course content ]
Security in situations employees face every day
We tailor the depth and emphasis of individual topics to your company's environment, industry and internal policies.
01Passwords and account security
- How weak and predictable passwords are created
- Why using the same password in multiple places is unsafe
- How to use a password manager
- Why a password alone is not enough
- How multi-factor authentication works
02Emails, phishing and other fraudulent messages
- How to spot a suspicious email
- Fake links, attachments and login pages
- Attacks via text messages, phone calls, QR codes and messaging apps
- How to verify unusual requests
- What to do if you have already clicked or entered information
03Social engineering and manipulation
- How attackers exploit authority, trust and time pressure
- Impersonating a colleague, company management or a supplier
- Manipulation over the phone and in person
- How to refuse or verify a suspicious request
04Fraudulent online shops and safe online payments
- How to spot an untrustworthy shop or payment page
- The most common types of payment fraud
- Using payment cards safely
- What to do if you suspect fraud
05Mobile device security
- Screen locks, updates and app permissions
- Using a work phone safely
- Risks of public networks and unknown apps
- What to do if a device is lost or stolen
06File sharing, cloud services and access
- How to share company documents safely
- Public links and their risks
- Checking permissions and access
- The difference between work and personal storage
- How to prevent unintentional data exposure
07Practical habits and recommended tools
- Simple checks before clicking or sending
- Recommended security tools
- How to build a safer daily routine
- When and to whom to report a suspicious situation
[ Training format ]You will not sit through hours of
You will not sit through hours of
lecturing that no one remembers
The training takes place in person and builds on situations participants know from work and personal life. We support the explanations throughout with practical examples, exercises and group discussion.
Participant involvement
Click to learn more →Participants do more than listen passively. They work through scenarios, answer questions and assess risky situations together.
← BackPractical exercises
Click to learn more →Participants practise selected topics using concrete examples. This helps them remember the steps they can use later.
← BackEveryday examples
Click to learn more →We explain security through situations that can actually happen: a suspicious email, an unexpected payment request, a fake login page or an improperly shared document.
← BackDiscussion and closing Q&A
Click to learn more →The training includes time for participants' experiences, questions and situations specific to their work. A dedicated question-and-answer session follows at the end.
← Back[ Practical information ]
Training tailored to your group and environment
The length of the training depends on group size, the desired depth of individual topics and the time allocated to practical exercises and discussion. These are not two fixed, separate options, we prepare a scope that fits each company's needs.
- Format
- In person
- Duration
- 3–6 hours
- Number of participants
- 5–30 people
- Prerequisites
- None
- Price
- From CZK 45,000
- Customisation
- Based on industry, internal policies, group size and desired depth
- Includes
- Presentation, handbook, checklist, learning materials and certificate
- Wrap-up
- Discussion and Q&A
- Suitable for
- Regular employee education, induction training for newcomers and establishing consistent security rules across teams
[ Your trainer ]
Pavel „SPAJK“ Matějíček
Pavel “Spajk” Matějíček is a cybersecurity trainer and consultant at BOIT. He has worked in cybersecurity for over 10 years, focusing on user security awareness, social engineering prevention and practical protection of company data in everyday operations. Previously, he worked at ESET, helping educate people about cyber threats.
In his training, he explains things clearly, without unnecessary technical jargon, using real-world situations. He shows participants how attackers think, the techniques they use and how to defend against them effectively in everyday work.
[ Why BOIT ]
We teach security people can actually put into practice
We draw on real situations
Participants work with examples they may encounter in email, on the phone and during an ordinary working day.
We speak clearly
No technical knowledge is required. We turn complex principles into simple decisions and useful habits.
We tailor the content
Before the training, we take into account your industry, internal policies, typical work situations and participants' knowledge.
We make room for questions
Discussion and Q&A are more than extras. They help apply general recommendations to your company's specific environment.
[ Client experiences ]
Security awareness for companies that do not want to rely on chance
Pavel's cybersecurity training has the pace of an ice hockey game: fast, practical and full of involvement. Participants aren't spectators: they're active players. No boredom, just clear insights they can use straight away.
Accolade has worked with Pavel for several years. His proactive approach makes his training one of our most popular and best-attended sessions, engaging people across generations.
We've worked with BOIT on information security talks for a long time. Pavel combines excellent expertise with an entertaining style. In over 10 years of organising specialist events, BOIT has been one of our best partners. Highly recommended.
[ FAQ ]
What you need to know before booking
01Do participants need prior knowledge?
No. The training is designed for everyday users and does not require technical education or cybersecurity experience.
02How many people is the training suitable for?
The recommended group size is 5 to 30 participants. This allows active participation, practical exercises, discussion and plenty of room for questions.
03Why does the training last 3 to 6 hours?
We determine the exact length based on group size, the desired depth of topics and the time allocated to exercises and discussion. These are not two fixed programme options.
04Will you tailor the content to our company?
Yes. We can adapt the content to your industry, work situations, internal policies and security priorities.
05Is the training available online?
We offer this training in person. Face-to-face delivery allows better participant involvement, practical exercises and responses to the group's questions.
06What do participants receive after the training?
The training includes a presentation, handbook, checklist, learning materials and certificate.
07Can participants ask questions during the training?
Yes. Questions and discussion are part of the entire programme, with dedicated Q&A time at the end.
08Can the training be used to onboard new employees?
Yes. Companies often include the training in new employee induction. It helps establish safe working habits from the start and introduces employees to the basic rules for handling accounts, emails, devices and company data. We can tailor the content to your company's internal policies and typical situations.
09How much does the training cost?
Prices start at CZK 45,000. The final quote depends on the duration, depth of content and number of participants.