For schools Training for teachers
In-school training that starts where teachers actually bear responsibility: grades, pupil data and their own staff account.
- Who we serveA school's teaching staff, on request together with the head and the system administrator.
- The difference from the class sessionThis is not about gaming accounts but about official data and the duty of supervision.
- What remainsConcrete rules for everyday school life instead of general advice.
Training for teachers
- Phishing on staff accounts: what it looks like and how to recognise it
- Handling pupil data, grades and health data in everyday life
- Secure use of private devices for work purposes
- What to do if a staff account has been taken over
- A short handout for the whole staff to read later
How it works in practice.
Coordination
Which systems are in use, have there already been incidents, which topics the head would like.
Training
Two to three hours, practical, with real examples from the school sector.
Hands-on part
Setting up two-factor authentication for staff accounts together.
Handout
A short written summary that also reaches colleagues who were absent.
A forged message designed to get you to do something – usually click a link and enter credentials. Modern variants are linguistically flawless and refer to real events in your organisation.
A supposed message from management with an urgent request for a transfer, often combined with a request for confidentiality. It is precisely this combination of urgency and secrecy that gives it away.
We send a harmless but realistic phishing email to your team ourselves. Nobody is harmed, nothing is installed. We measure how many click – and how many report it.
A reported attack is an attack fended off. That is why the most important number is not how few click, but how many speak up. Evaluation is always anonymous, never by name.
What is included – and what explicitly is not.
Typical scope
One teaching staff, usually as part of an in-service training day.
Duration
Two to three hours.
Prerequisite
A room with a projector. For the hands-on part, participants bring their work phone.
Not included
No technical test of the school network – that is the school network check.
Training changes behaviour, not technology. If the school network lacks separation between the teaching area and administration, training alone won't help.
What people ask beforehand.
That is for your school authority or the University College of Teacher Education to decide. We provide a certificate of attendance with content and duration, which is usually sufficient for recognition as in-school training.
Yes, the training is designed for that. We don't assume any prior knowledge and work with situations everyone knows. Those who know more get their more demanding questions answered in the hands-on part.
Yes, that actually makes sense: the teaching staff in the morning, the parents in the evening. The topics partly overlap, but the focus is different.
More offers for you.
Awareness training for classes
Two lessons from year 5, in the class's language rather than the handbook's – with real cases the pupils know.
School network check
A technical assessment tailored to the reality at schools: limited budget, curious users with a lot of time and particularly sensitive data.
Parents' evening on digital safety
An evening for parents and guardians that is not about bans, but about what actually helps at home.
Training for teachers
In-school training that starts where teachers actually bear responsibility: grades, pupil data and their own staff account.
What can be found publicly about your school
A passive assessment without any risk: we gather what is freely available online about your school – from forgotten logins to data in published files.
What we encounter in assessments, before you encounter it.
Not a product newsletter. We write about attack paths that actually worked against Austrian businesses, authorities and schools – and what helps against them.
- About once a month, not every week
- Concrete attack paths from real assessments
- No tracking pixel, no sharing with advertisers
- Unsubscribe with one click in every email