Staff training · Southwest Florida
Security Awareness Training Your Staff Won’t Sleep Through
Pilots crash in simulators so they don’t crash in planes.
NerdSquad Managed IT Services runs realistic phishing simulations and short, practical lessons that teach your team to spot scams, report them and slow down before paying an invoice. You get reports you can show insurers and auditors.
Simulations
Realistic and unannounced
Lessons
Short and practical
Reporting
One click to flag it
Proof
Reports for insurers
01 · Plain English
What is security awareness training?
Security awareness training teaches employees to recognize and report the scams that technology misses: phishing emails, fake invoices, urgent requests from “the boss” and calls asking for passwords.
The best programs don’t rely on a once-a-year video. They use realistic phishing simulations to show who’s at risk, then give those people short lessons right when the lesson will stick.
We’re a Managed Service Provider (MSP) in Naples. We run the simulations, assign the training, track the results and connect what we learn to the email security and identity protections we already manage for you.
What’s included
🎣
Phishing simulations
Realistic, unannounced test emails based on the lures criminals actually use.
🎓
Short training lessons
Brief, practical lessons instead of hour-long videos nobody watches.
⏱️
Just-in-time coaching
Anyone who clicks a simulation goes straight to a short lesson on what they missed.
🚩
One-click reporting
An easy way to report a suspicious email, and a real person who reviews it.
🧑💼
New-hire onboarding
New staff can be enrolled when they start, before they’ve seen their first fake invoice.
📊
Results and reports
Click, report and completion results you can share with insurers, auditors and clients.
02 · The flight simulator
Practice crashes are cheaper than real ones
Pilots train in simulators because a mistake there costs nothing. Phishing simulations work the same way: a safe, fake attack shows who would have clicked, and a short lesson fixes it before a real one arrives.
Training dashboard
● Simulation in progress
●
Click rate
Who clicked a simulated phish. You want this falling.
●
Report rate
Who flagged it instead. You want this climbing.
●
Training completion
Who finished their assigned lessons.
●
Repeat clickers
Who needs extra coaching.
Illustration. Your dashboard shows your own team’s results over time.
Want a baseline?
An unannounced first simulation shows where your team stands today. We’ll walk you through the results.
03 · How it runs
How the program works
Training works when it’s regular, realistic and a little bit surprising. Here’s the rhythm.
01
Baseline test
An unannounced phishing simulation shows how your team responds today. No one is singled out publicly.
02
Enroll your team
Staff get short training lessons, with new hires added as they start.
03
Ongoing simulations
Simulated phishing arrives unannounced and varies, so people learn to spot patterns, not memorize one email.
04
Coaching on the spot
Anyone who clicks sees a short lesson on what they missed, right away.
05
Report, don’t delete
Staff learn to report suspicious email. Real reports are reviewed and similar messages removed.
06
Review the results
We review trends with you and share reports you can give insurers, auditors and clients.
Clicking a simulation isn’t a firing offense. The goal is practice, and the people who click early are often the best reporters later.
04 · What staff learn
The scams your team will actually see
Lessons focus on what lands in small-business inboxes and phones, not abstract theory.
Phishing emails
Fake logins, shared-file lures and “your mailbox is full” warnings.
Check the sender and the real link before clicking
Treat urgency as a warning sign
Report it instead of deleting it
Someone already fell for one?
Call us right away. Then let’s make sure it’s the last time.
05 · Which plan includes this?
Training is part of every plan
Security awareness training and phishing simulations are a standard part of every managed IT plan, along with the email security basics and MFA that back up your team.
What you get
Endpoint Starter
Endpoint Pro
Endpoint 360
Microsoft 365 / Google Workspace management
✓ Included
✓ Included
✓ Included
MFA enforcement and sign-in monitoring
✓ Included
✓ Included
✓ Included
SPF, DKIM and DMARC setup
✓ Included
✓ Included
✓ Included
Compliance support and reporting
—
—
✓ Included
Security awareness training
✓ Included
✓ Included
✓ Included
Advanced email security and impersonation protection
Add-on
Add-on
Add-on
Your written proposal lists exactly what’s covered.
Compare the three plans →06 · Questions owners ask us
Security awareness training FAQ
What is security awareness training?
Security awareness training teaches employees to recognize and report phishing, payment fraud, password scams and other attacks that technology can miss. Good programs combine short lessons with realistic phishing simulations.
How do phishing simulations work?
We send realistic, unannounced test emails modeled on real scams. If someone clicks, they see a short lesson on what they missed. If they report it, that’s recorded too. Results show who needs more coaching and how the team improves over time.
Will employees know about the simulations?
They’ll know the program exists, but individual simulations are unannounced. That’s what makes them realistic.
What happens if someone clicks?
They’re taken to a short lesson about the warning signs they missed. It’s coaching, not punishment. Repeat clickers get extra attention, and we share the trends with you privately.
How often do simulations run?
Regularly throughout the year, with varied lures so people don’t learn to spot just one email. We set the schedule with you.
Is security awareness training required?
Often. HIPAA requires security awareness training for your workforce, the FTC Safeguards Rule requires it for covered financial businesses and PCI DSS expects it for anyone handling card data. Many cyber insurers ask about it on applications. Training supports compliance; it doesn’t certify it.
Can you train new employees?
Yes. New staff can be enrolled when they start, so they learn the warning signs before they see their first fake invoice.
What reports do we get?
Simulation results, report rates and training completion over time. They’re useful for insurance renewals, audits and client security questionnaires.
Does training replace email security?
No. Filters stop most attacks before anyone sees them, and training covers what gets through. You need both, which is why we manage them together.
Is training included in your managed IT plans?
Yes. Security awareness training and phishing simulations are a standard part of every plan, along with email authentication, MFA and Microsoft 365 or Google Workspace management. Advanced email security and impersonation protection are add-ons.
By industry
Medical offices, advisers and accountants train for compliance. Everyone trains because the scams are getting better.
Near you
We’re based in Naples. Cybersecurity pages by city:
Training
Find out how your team would do
Tell us how many people you have and whether an insurer, auditor or client is asking. We’ll recommend a program and start with a baseline test.
A baseline phishing test
Training sized to your team
Reports for insurers and auditors
NerdSquad Managed IT Services · Naples, FL · 239-465-0079
Ask about training
A real person reads every message. Please don’t send passwords or sensitive data.
