Training, Talks & Live Hacking

Your employees are the weakest link in the chain. Or your strongest defence.

Live hacking, awareness training and seminars for executives and IT. No off-the-shelf programme: every session grows out of what is on your mind.

  • Real findings from pentests
  • Cases from investigative work
  • No standard programme

How an attack chain breaks

An attack needs every step. One person who hesitates at the second and reports it ends it.

That is the exact moment we practise: notice, pause, report. Without guilt and without anyone being singled out.

Formats

Building blocks we deliver regularly. We cut the format to the occasion, the audience and the goal.

Talk or keynote

Live hacking

A real attack on demo systems, performed in real time and explained so that non-technical people follow it too. 45 to 90 minutes, for staff assemblies, kick-offs, customer events and management meetings.

Training

Cyber security for employees

Phishing, CEO fraud, fake invoices, passwords, mobile devices and how to react when something goes wrong. With exercises and case studies, half or full day.

Seminar

Cyber security for executives

Liability and duty of care, NIS2, the business impact of an incident, emergency organisation and decision paths. Compact, no technical background required.

Technical seminar

Blue teaming for IT teams

Red team attacks seen from the defender's side: what they look like in the logs, where they get stuck, which configuration would have prevented them. On request, along the lines of your own pentest report.

Training series

Multi-part programmes

Modules that build on each other, spread over weeks, for example staff, management and IT in turn. Also as an open series through chambers, associations or training providers.

What we build the programme from

Before every session we ask what is on your mind. The programme grows out of that:

  • The last pentest report
  • An incident from the past
  • A compliance requirement such as NIS2, ISO 27001 or TISAX
  • Your industry, size and processes
  • Results of a phishing simulation
  • An occasion: staff assembly, kick-off or trade fair

The report does not have to be ours. We read it in advance, pick the findings that suit the workforce or the IT team, and build the demos around them.

Three promises

  • Demo systems, never your data

    Every attack runs against purpose-built target systems. Your infrastructure is not touched.

  • Nobody gets singled out

    Employees should report suspicious things without fearing their own inbox. Whoever clicked in a test stays anonymous.

  • From real cases

    Examples from our own pentests and from investigations with the criminal police. Anonymised, but that is how it happened.

Training is no longer optional

Several frameworks now require regular training. Our content follows these requirements, and you receive the agenda in advance for your records. Whether that satisfies your obligation is a question for you and your advisers.

NIS2 / section 38 BSIG
Management bodies of particularly important and important entities must regularly take part in training on risk management in IT security. In addition, Article 21(2) NIS2 requires cyber hygiene practices and training for the workforce.
ISO 27001
Control A.6.3 requires awareness and training for all personnel, regularly and documented.
TISAX / VDA ISA
The catalogue requires trained and aware staff, especially where people have access to prototypes and customer data.

At your place, remote or elsewhere

  • In-house: a room, a projector, a power socket, nothing more
  • Remote via Teams or Zoom, live hacking included
  • At third-party events: chambers, associations, conferences, customer events
  • German or English
  • From a workshop with eight participants all the way to a full staff assembly

From the first call to delivery

1

Conversation

Occasion, audience, time and place. Half an hour is usually enough.

2

Tailoring

Demos and examples to match your industry, size and occasion. On request with your own results.

3

Delivery

On site or remote. We bring along the laptop, the demo environment and the hardware, you provide the room and the projector.

4

Afterwards, as needed

A follow-up call, written material, a refresher session or a phishing simulation that measures what has stuck.

Tell us the occasion and the audience

A staff assembly next month or a training series for the whole company: write to us or book a short call straight away.

Book online: access-granted.de/en/booking/kennenlerntermin

More online: access-granted.de/en/training