Cybersecurity Awareness Month, without the box-ticking.
October comes around every year, and most awareness programs reach for the same posters and the same quiz. This year the threat has changed: AI has made social engineering cheaper, faster and far more convincing, and it has put a capable assistant on every desk. We have curated a ready-to-run pack that helps your people pause, look inward, and build habits that hold up under pressure.
Why this October is different
Deepfaked voices on the phone. Lures written fluently in your house style. Payment redirections that reference real projects and real colleagues. AI has not invented new cons; it has industrialised the old ones, and the volume and polish now exceed what a once-a-year compliance module prepares anyone for. At the same time your people have been handed assistants of their own, which quietly raises a second question nobody covered in last year's training: what is safe to paste into one, and what is not. The organisations that hold up treat awareness as behaviour change: small habits, rehearsed often, owned by every team.
Awareness is a loop, not an event
A module people click through in October is forgotten by November. What survives contact with a real lure is a rehearsed habit: noticing the pressure, checking through a second channel, reporting quickly without fear of looking foolish, and seeing that report acknowledged so the next one comes faster. Everything in this pack is built to run that loop in fifteen-minute pieces, inside teams, in the flow of work.
What is in the pack
Twelve pieces, curated by Kode-1 and ready to run. Add your branding, tailor the examples, and go.
Incident walk-throughs
Which response was right? A short scenario a team can run in fifteen minutes and argue about properly.
Leadership briefing
An exclusive for the executive: what has changed, what it means for the organisation, and what leaders are asked to model.
Industry attack snapshots
The same attack, played out in different sectors, so the threat lands as concrete rather than generic.
Quarterly breach snapshot
A digestible read on what has actually been happening, for the people who never open the security newsletter.
AI guide and behaviour cards
Sixteen one-page cards on working safely with AI: approved tools, enterprise accounts, least-privilege connections, reviewing agent actions, keeping sensitive content out of chat history.
Role-based education cards
Tailored for executives, finance, human resources, IT and remote workers, because the lure aimed at payroll is not the one aimed at an engineer.
Interactive tools
A phishing signal drill, a quishing generator for QR-code lures, and a secure behaviour self-assessment teams can score themselves against.
Posters and stickers
Physical reminders that keep the habit in view long after the session ends: not today phishing, panic is the payload, real ones verify.
A month you can run yourself
No licence, no platform, no consultant on site. Everything is designed to be adapted for internal use and reused beyond October.
A four-week plan that fits around real work
One theme a week, fifteen minutes a team. This is how we would run it; the pack works in any order you like.
- 01
Week one: make it concrete
Open with the industry snapshot for your sector and one incident walk-through. The goal is recognition, not fear: this is what it looks like here.
- 02
Week two: make it personal
Hand out the role-based cards and run the self-assessment. People engage with the lure aimed at their own job in a way they never do with a generic module.
- 03
Week three: take on AI
Work through the AI guide and pick three behaviour cards to adopt as team norms. Approved tools, enterprise accounts, and nothing sensitive in chat history is a strong opening three.
- 04
Week four: rehearse and reinforce
Run the phishing and QR drills, brief leadership with the executive piece, and put the posters and stickers up. Close by telling people what reporting actually triggers, so the loop keeps turning in November.
What this pack will not do
It will not make you compliant, and it does not pretend to be a training platform. It is a month of well-made material that gets people talking about the right things, and a foundation for the habits that matter. If what you need is a governed program with measurement, adoption tracking and evidence for an auditor, that is a conversation rather than a download, and we are happy to have it.
Why we put it together
We spend our working lives inside other people's estates, and the pattern is consistent: the control that fails is rarely the technical one. It is the moment someone is rushed, and the lure is good, and there is no rehearsed habit to fall back on. Curating this pack is cheaper for everyone than watching that moment play out. Take it, run it, and if it raises questions about what your people can reach or what your assistants can see, ask us. That is the part we do for a living.
Get the pack
Leave your details and we’ll email you the download link.
Frequently asked questions
Yes. Leave your details and the download link arrives by email. There is no licence, no trial, and nobody will chase you with a sequence.
Yes, and you should. The materials are designed to be adapted for internal use: add your logo, swap the examples for ones your people recognise, and cut anything that does not fit.
Whoever owns awareness, usually a security lead, a technology leader, or a people and culture team running the month with security's help. The leadership brief is written for the executive audience specifically.
Fifteen minutes a week per team, over four weeks, if you follow the plan on this page. The materials work just as well spread across a quarter.
Absolutely. The pack is built to seed a year-round behaviour program, and none of the materials are dated to a single month.
Substantially. Sixteen behaviour cards and a dedicated guide cover working safely with assistants and agents, which is the part most awareness programs have not caught up with yet.