Assess
Kick-off meeting, risk assessment, measurement of awareness and maturity, and an initial phishing campaign.
Cybersecurity training
Cybersecurity training you can practise, measure and prove
Crisis management exercises, technical and awareness training, our CYBERFORGE platform with an integrated AI assistant, and dedicated programmes for leaders. Cybersecurity is ultimately about people.
Design your company training plan →Cybertix trains companies of every size, with particular attention to SMEs. We combine crisis exercises, technical and awareness training, our own CYBERFORGE platform with an AI assistant, executive training and advice, and university courses in collaboration with the UPV/EHU. We train, measure and produce evidence for NIS2, ENS and ISO 27001 audits.
The situation today
Knowledge alone is not enough. People need to practise, measure and repeat.
- 84% of cybersecurity leaders want to reduce risk by managing employee behaviour, but only 43% consistently track it (Gartner, 2022).
- The human factor is involved in 82% of data breaches.
- 93% of employees who take unsafe actions already knew they increased risk for their organisation (Gartner, 2022).
The problem we solve
Even the best technology leaves a company vulnerable when an attack exploits a human decision: a click, a shared password or a fraudulent call.
Many companies also have an incident response plan they have never tested. A real attack is no time to discover nobody knows whom to call, who can disconnect a system or how to communicate the crisis.
Our training addresses both the people using technology and the leaders making critical decisions during an incident.
A method, not a one-off session
We repeat and improve a four-phase cycle; each round informs the next.
Raise awareness
Gamified content, short lessons, posters, practical guides and newsletters for all staff.
Train
Role-based courses on handling information, internal policies, social media and risk management, plus technical and executive talks.
Build culture
CYBERFORGE tracking, course and quiz assessments, gamification and phishing campaign results.
Four lines of work
We combine these lines according to each organisation’s needs.
Cyber exercises
We simulate ransomware, data leaks and service outages without real risk, then deliver a prioritised improvement plan.
Technical training and awareness
Tailored learning for IT and development, with awareness for all staff. Phishing simulations measure improvement without blame.
CYBERFORGE
Our e-learning platform with an AI assistant provides role-based content, progress tracking and certificates.
Executive training and advice
We explain risks, responsibility and governance in accessible language.
CYBERFORGE: continuous, measurable learning with AI
Our own cybersecurity e-learning platform is customised with your company’s branding and launched in less than 72 hours.
- ADI, the AI virtual assistant, answers learners’ questions about their current lesson in real time, around the clock.
- A streaming-inspired interface offers fully responsive microlearning.
- Challenges with colleagues or AI, avatar progression, rankings and progress metrics.
- Certificates, tracking and live dashboards provide evidence for NIS2, ENS or ISO 27001 audits.
- Available in Spanish, English, French, Portuguese, Basque and Catalan.
- FUNDAE compliance, with a review profile for SEPE inspectors.
Historias Ciberconectadas
Our own series of ten five-minute episodes uses humour to teach everyday security: passwords, phishing, public Wi-Fi, online fraud, ransomware, social media, safe shopping, updates and mobile use.
Each episode fits into a CYBERFORGE learning pathway and can accompany monthly short lessons to sustain awareness throughout the year.
Cyber exercises: put your crisis committee to the test
In a guided roleplay, the crisis committee faces a simulated ransomware attack, extortion or data leak. A live screen shows active events, rounds and the time left to decide.
The exercise develops decision-making under pressure, response capability, knowledge of internal procedures and committee coordination.
- After each round, the facilitator reviews actions and leads a debrief. The exercise ends with lessons and concrete recommendations.
- You receive a report covering objectives, scope, simulation summary, results, assessment and conclusions for management or audit.
- The full service, from kick-off to report, takes one month and can be delivered in person, remotely or in a mixed format.
University training with the UPV/EHU
For a second year, we are collaborating with the University of the Basque Country (UPV/EHU) on cybersecurity courses and micro-credentials. This is the second edition of the EHU Faculty of Informatics university cybersecurity courses.
Seven flexible online courses total 210 hours. Take one independently or complete the pathway; after passing each course, you can request a certificate issued by the EHU. Courses begin in November 2026, with enrolment available at any time after launch.
The courses suit technical, management and industrial professionals, including administrators, developers, network engineers, SOC analysts, CISOs, compliance and IT audit staff, and OT/ICS teams. See the EHU website for current programmes, enrolment and prices.
Executive training and advice
Leaders make critical decisions about communications, continuity and reputation during a crisis, and NIS2 requires periodic training for governing bodies. We explain risks, responsibility and governance in accessible language, involve management in cyber exercises and bring security into business decisions.
How this fits with our other services
- All-in-One 24×7 SOC: continuous monitoring supports teams when someone makes a mistake.
- Compliance and safe AI: certificates, reports and exercises provide evidence for NIS2, ENS and ISO 27001.
- Consulting and audits: phishing campaigns and cyber exercises complement pentesting, secure development and cyber defence.
- Corporate security: we also protect key people through executive digital-footprint reviews and crisis exercises.
Who is this service for?
Regulatory requirements
- Companies that must demonstrate training for NIS2, ENS or ISO 27001.
- Organisations whose governing bodies must receive training under NIS2.
Practical protection
- Leadership teams seeking informed decisions without becoming technical specialists.
- Organisations that have experienced an incident and want to prepare for the next one.
- Professionals who want university training to advance their careers.
- Any company whose staff use email, cloud apps or connected devices, with or without a company device.
Why work with us
We tailor each programme to your reality, combine cyber exercises with CYBERFORGE and adapt content to your sector, as we have done for industrial, financial and food-sector clients. We include everyone from reception to the board, including staff without company devices.
We work for you, so you can stay focused on your business without worries or disruption.
Talk to our training team →Frequently asked questions
Your questions, answered
What is a cyber exercise or tabletop exercise?
A guided, risk-free simulation in which leaders analyze how they would respond to ransomware, a data leak or an outage before a real event forces improvisation.
Is cybersecurity training mandatory?
NIS2 and ENS require regular, demonstrable training for organizations in scope. Even when not mandatory, it is one of the most cost-effective preventive measures.
What is CYBERFORGE?
Our role-based continuous-learning platform with an AI assistant, progress tracking and certificates that provide audit evidence.
How soon can CYBERFORGE launch?
It is customised with your company branding and can launch in less than 72 hours.
Why does management also need training?
Leaders make critical crisis decisions about communications, continuity and reputation. NIS2 also requires governing bodies to be trained.
Do phishing simulations single out employees?
No. They measure risk and guide training. A responsible program focuses on continuous improvement, not punishment.
What about staff without company email or devices?
We design dedicated sessions, in person or online, so nobody is left out, including plant and production staff.
What are the UPV/EHU university cybersecurity courses?
Seven online courses from the EHU Faculty of Informatics, offered with our collaboration for a second year. You can take them separately or as a pathway, and request an EHU certificate after passing each course.
Can I take just one course?
Yes. Each course is independent, and you can enrol at any time once it has launched.