Four packages, one standard.
Every package is facilitated by our own team, on site or online, with a fixed time and a clear audience. They can be combined. We recommend your leaders go first.
Armourware Shield
Everyone in the organisation
The A.W.A.R.E protocol and six scenario rounds on the attacks people see every week.
- Half day · 3 h 20 min
- Up to 30 people
- A1 and six of C1 to C8
- 90 minutes for frontline and shift workers, in the home language.
Armourware Gauntlet
The people whose hands move money, data and access
The protocol, two rounds, then a role lab with a live simulation of their own process.
- One day · 7 h
- Up to 16 per stream
- A1, two rounds, one of R1 to R4
- Up to two role streams can run in one day.
Armourware Helm
Executives, boards and senior officials
Seven leadership modules, including a crisis tabletop and a media call.
- One day · 7 h
- Up to 20 people
- A1 and L1 to L7
- Two hours, inside your board meeting. Commitments go into the minutes.
The Board Briefing: two hours, inside your board meeting.
You are the target
L1. Why leaders are the face, voice and signature attackers copy.
A.W.A.R.E and checking upward
The protocol, and L2: how leaders switch off deference as a way in.
Five questions, on your data
L7. How to govern cyber risk without being a technical expert.
Commitments
Every leader makes one, in front of their peers. They go into the minutes.
Armourware Full Armour
The whole organisation, top to bottom
Helm, Gauntlet and Shield together, measured before and after.
- 6 to 10 weeks
- No group gives more than one day
- Every module, matched to each group
- A baseline, a 90-day re-check and a page for your board.
Six to ten weeks, measured before and after.
- 01
Baseline
Safe test messages, and a check of recent banking changes.
- 02
Helm
Leaders go first and agree to be checked.
- 03
Gauntlet
Role labs for the people who move money, data and access.
- 04
Shield
Everyone else, with Shield Site for frontline teams.
- 05
Nudges
Day 2, 14 and 45 for every participant.
- 06
Re-check
Day 90, then a full report and a page for your board.
The number we lead with: time to first report.
The minutes between an attack landing and the first person reporting it, read with report rate, by team and site. People who report fast are the best alarm an organisation has.
Training matched to each group’s risk.
Attackers aim at roles, not people. So the package and the modules follow the role.
Assess the ask. Then ask.
Start with a setup call. We’ll recommend the package that fits your risk, and set dates away from month-end and payroll. Our advice: start with Helm or the Board Briefing, so your leaders go first.