Enya Security
Request a quote

Training and awareness

Practical skills
for a safer organisation

Hands-on training built on realistic scenarios and guided exercises, helping professionals, small businesses and organisations prevent incidents and adopt security practices they can actually verify.

Hands-on Realistic scenarios and guided exercises
Tailored Adapted to your sector and your audience
Remote or on site Same quality, more flexibility
Enya Security cybersecurity training — train today, protect tomorrow

Our sessions

Concrete topics, immediate results

Pick the session that matches your needs. Every topic can be tailored to your sector and to the maturity level of your teams.

3 hrs

Cybersecurity essentials for professionals and small businesses

All staff

Threat landscape, good practice, protecting access, email, cloud and remote work.

Learn more
  • How attacks against small organisations actually unfold
  • Passwords, multi-factor authentication and shared accounts
  • Email and attachments: what to check before clicking
  • Cloud, personal devices and remote work
  • Closing checklist of priority measures
3 hrs

Ransomware and the first hours

Professionals · Small businesses · Professional bodies

How to prevent an attack, what to do in the first hours, and how to recover.

Learn more
  • The real threats facing professionals and small businesses (25 min)
  • Protecting access, with a guided exercise (30 min)
  • Backups and ransomware readiness, with a guided exercise (30 min)
  • Online exposure (25 min)
  • Incident handling: the first hours and the mistakes to avoid (25 min)
  • Closing checklist and a four-week plan (25 min)
3 hrs

NIS2 for directors and managers

Leadership and management

Accountability, risk management, incidents, suppliers and the priority measures set out in the directive.

Learn more
  • Who falls within scope, and at which level of obligation
  • Management-body accountability (Directive (EU) 2022/2555, art. 20)
  • The risk-management measures expected (art. 21)
  • Incident reporting: deadlines, recipients and content
  • How national transposition varies, and what is worth doing now regardless
90 min

Phishing and social engineering

All staff

Spotting fraud attempts, analysing suspicious messages and links, guided exercises on realistic scenarios.

Learn more
  • The six signals to check, in order of priority
  • Sender domains, real link destinations and dangerous attachments
  • Invoice fraud and changes to bank details
  • What to do when the request comes from a legitimate but compromised mailbox
  • Analysis exercise on messages reconstructed for teaching purposes
Specialist session

Supply chain and third-party risk

3 hrs · Leadership · Procurement · IT

Identifying critical suppliers, assessing access and dependencies, and building security requirements into third-party relationships.

Learn more
  • Why large customers push security requirements down to their suppliers
  • How to read and complete a customer security questionnaire
  • Criteria for ranking your own suppliers by criticality
  • Contract clauses and service levels: what to ask for
  • What to prepare before a customer asks for it
2 hrs

GDPR from a security angle

Leadership · Data protection leads

The security measures of Article 32, handling personal data and the main risks.

Learn more
  • Appropriate technical measures: what that means for a small organisation
  • Recognising a personal data breach, even when nothing was stolen
  • Notifying the supervisory authority within 72 hours, and informing data subjects
  • Documenting the assessment even when you decide not to notify
  • Processors: the link between contract and security
2 hrs

Generative AI and cyber risk

Leadership · All staff

Opportunities, risks and good practice for using AI tools without losing control.

Learn more
  • What actually leaves the organisation when someone uses an AI assistant
  • Confidential and personal data in generative tools
  • AI-assisted fraud: convincing messages, cloned voices and video
  • Internal usage rules: what to write and how to make them stick
  • What to check before approving a new tool
1-hour modules

Cyber Express

All staff

Short, practical modules: MFA, passwords, cloud, backups, incident response. Ideal for quick awareness sessions.

Learn more
  • Passwords and multi-factor authentication
  • Backups: the 3-2-1 rule and the restore test
  • Remote work, cloud and personal devices
  • The first steps when an incident happens
  • Combine them, or slot one into a meeting you already hold

Tailored training

We adapt every session to your audience

Duration, content and examples tailored to your sector, the level of the participants and your objectives. Get in touch and we'll shape the programme together.

Let's talk First conversation, no obligation

Why Enya Security

Training that is useful, not just theoretical

Industrial experience A pragmatic approach built over nine years of consulting in complex industrial environments
Materials included Slides, checklists and practical resources for every participant
Small groups Room for interaction, questions and tailored exercises
Exercises and real cases Realistic situations matched to the sector and the audience

Named certificates of attendance are issued at the host organisation's request, based on the attendance it has recorded.

Who delivers the session

The trainer

Marina Bruno — founder and cybersecurity consultant. She holds degrees in Information Engineering (University of Salento) and Management Engineering (Politecnico di Bari), with nine years as a consulting engineer in complex industrial environments in the aerospace sector.

Through Enya Security she carries out documentary, non-intrusive audits for small organisations, based on publicly available standards, configuration benchmarks and guidance. More about Enya Security →

Ready to arrange a session?

Get in touch for a tailored programme

Remote or on site, for your team, your professional body or your association.

Request a quote

Sessions delivered for professional bodies and associations are organised by the host organisation, which alone decides whether continuing-education credit applies. No product, vendor or commercial service is promoted or named during a session.

Sessions are delivered in English, French or Italian, and are invoiced directly to the client organisation.

© 2026 Enya Security — All rights reserved.