Training that changes behaviour,
and proves it.
Role-based security awareness for your staff, built on the threats they actually face and the regional rules you answer to, and paired with phishing simulation so you can measure whether it worked.
Awareness is measured by what people do.
Most awareness programmes measure completion: who clicked through the annual video. That tells you staff were taught. It does not tell you whether they would spot a convincing invoice fraud on a busy Friday, or report it.
SKULD builds and runs awareness programmes around the people who carry the most risk: finance teams facing payment fraud, executives targeted by impersonation, developers handling secrets, administrators with privileged access. Scenarios reference GCC and Asia regulators and the threats we see in our own engagements. Paired with phishing simulation, the programme shows you click, credential-entry and report rates by department, so you know where it is working and where it is not.
- Role-based modules for executives, finance, developers, privileged users and general staff
- Curriculum aligned to the regulation you answer to: UAE PDPL, Saudi PDPL, UAE IA Regulation, NCA ECC, PCI DSS, SOC 2 and ISO 27001
- Phishing simulation results by department, feeding targeted follow-up training
- Knowledge checks with remediation training assigned where it is needed
- Departmental risk scoring and trend reporting for the security team
- An annual programme review against the current threat landscape
Baseline, train, test, repeat.
Baseline
We agree the audience, the roles that carry the most risk and the regulatory obligations, and run a first simulation to see where you start.
Train by role
Targeted modules go to the people who need them, in language they understand, with regional scenarios.
Test with simulation
Phishing, smishing and pretext campaigns measure whether behaviour changed, department by department.
Reinforce
Short follow-up modules and just-in-time prompts keep awareness current between the larger sessions, and the programme is refreshed each year.
One programme,different risks.
Executives and finance
Business email compromise, payment fraud and impersonation of senior leaders.
Developers
Secure coding habits, secrets handling and software supply chain risk.
Privileged users
Social engineering aimed at administrators and credential hygiene.
All staff
Phishing, safe handling of classified data, safe use of AI tools and how to report.
Who it is for
Any organization with staff and email, particularly those whose compliance, HR or board teams need evidence that awareness training is reducing risk rather than just being completed.
- Phishing simulation, measure whether training worked
- Email security, stop more of it reaching inboxes
- HLÍN, a safety net for data typed into AI tools
- vCISO, own the programme at leadership level
What buyers ask.
We already do annual awareness training.
Annual training tells you staff were taught. Pairing it with phishing simulation tells you whether it worked, by department, and where to focus next.
Our staff tune out generic videos.
So do most. SKULD modules are built for the role and use regional scenarios and regulators, so the content is about the job people actually do.
Will this satisfy our auditors?
The curriculum aligns to the frameworks you report against, including UAE PDPL, Saudi PDPL, NCA ECC, PCI DSS, SOC 2 and ISO 27001, and you get completion and behaviour data to show them.
Isn't phishing simulation just trying to catch people out?
It is a measurement, not a punishment. Results go to targeted training, not to a list of names on a wall.
Where do our people take the training?
On the Mjolnir Training portal, run by Mjolnir Training, our corporate training arm. Courses include hands-on labs.
Build a workforce that reports, not clicks.
Whether it is your first programme or a stale one nobody completes, scope it with an engineer. No charge, no commitment.