-- As cyber incidents linked to human error continue to rise, Australian organisations are being urged to strengthen one of their most overlooked defence layers: their people. In response, Brisbane-based consultancy vCISO.One has launched a new Cybersecurity Awareness Training program designed to improve staff understanding of digital threats and support compliance with key frameworks such as the Essential Eight, ISO 27001, and PCI-DSS.
The training has been developed in recognition of industry and regulatory shifts, with insurers, auditors, and enterprise clients now expecting demonstrable evidence of staff awareness initiatives.
“Technical controls are only part of the solution,” said Andrew Egoroff, principal consultant at vCISO.One. “Cybersecurity outcomes are often determined by human decisions — recognising a phishing email, reporting suspicious activity, or simply following basic data handling practices.”
The program includes a range of delivery options, from live or virtual staff training to executive briefings and phishing simulation campaigns. The content is tailored to each organisation’s systems, policies, and industry-specific risks, with optional compliance tracking and reporting.
Key components of the program include:
- Training on phishing, passwords, social engineering, privacy, and data handling
- Safe, real-time phishing simulations with individual feedback
- Board and executive cyber briefings focused on governance obligations
- Optional integration with policy awareness modules and SCORM-compatible LMS environments
According to industry data, over 80% of reported breaches involve some form of human element. With local councils, not-for-profits, schools, and aged care providers handling increasing volumes of sensitive data, the need for targeted and accessible training is growing.
“In many cases, organisations don’t need more tools — they need better habits,” Egoroff said. “Staff awareness can be the difference between a near miss and a major breach.”
The service is designed to support organisations with limited in-house cybersecurity resources. It is particularly relevant for those pursuing Essential Eight maturity targets or responding to insurance and regulatory audit requirements.
The launch follows growing scrutiny of organisational preparedness, including from boards and risk committees seeking clearer insight into cyber governance. vCISO.One’s executive briefings are intended to bridge this gap by translating technical risks into business language and outlining the legal and operational implications of cyber threats.
vCISO.One plans to expand the program over the coming months with additional modules and industry partnerships.
About vCISO.One
vCISO.One is an independent cybersecurity consultancy based in Brisbane, delivering tiered virtual CISO services and practical security solutions to small-to-medium businesses, councils, and not-for-profit organisations across Australia. Areas of expertise include risk assessments, cloud security, policy development, and awareness training.
Learn more at www.vciso.one.
Contact Info:
Name: Andrew Egoroff
Email: Send Email
Organization: vCISO.One
Address: 29/97 Creek Street, Brisbane City, Queensland 4000, Australia
Phone: +61-1300-067-003
Website: https://vciso.one
Release ID: 89166436