Our package includes:

Penetration Testing and Security Assessment

• Mobile App: Testing for security and vulnerabilities of a mobile app before or after launching
• Physical: Assessing all physical security controls through attempts to gain physical access to restricted areas and data
• Wireless: Examining wireless infrastructure and its performance to uncover security flows
• Web app: Testing to uncover vulnerabilities and potential points of exploit
• Network: Ethical hacking of a network environment to discover how systems will respond to a real cybersecurity threat
• API: Manual analysis of API functionality to assess the security of authentication, queries, and data transfers
• Physical social engineering: real-world breaches of physical safeguards to assess people, processes, and procedures
• Phishing email campaigns: testing employees’ ability to identify and report phishing emails through real-world attack scenarios
• Cloud security assessment: Analysing cloud infrastructure and identifying weaknesses and potential entry points
• Advanced adversary simulation: testing existing controls protecting your most critical information through real-world attacks on your network and applications

Staff Training:

• Mandatory cybersecurity awareness training for all employees.
• Regular refresher training sessions.
• Targeted training for specific roles (e.g., IT, HR, finance).
• Focus on topics such as:
  • Password management
  • Phishing and social engineering
  • Data protection and privacy
  • Mobile device security
  • Email security
  • Incident reporting

Top Management Training:

• Executive-level cybersecurity briefing.
• Overview of the organization’s cybersecurity posture.
• Discussion of emerging threats and risks.
• Role of leadership in promoting a security culture.

Training Topics

General Cybersecurity Awareness:

• Understanding cyber threats and attacks (e.g., phishing, ransomware, malware)
• Importance of strong passwords and password management
• Data protection and privacy best practices
• Social engineering tactics and prevention
• Mobile device security
• Email security and safe browsing habits
• Incident reporting procedures

Specific Role-Based Training:

• IT staff: Advanced technical security topics, threat hunting, incident response
• HR: Data privacy regulations, employee onboarding and off-boarding security, social engineering awareness
• Finance: Financial fraud prevention, secure payment practices, data protection

Top Management:

• Building the culture of cybersecurity
• Cybersecurity risk management and governance
• Business continuity and disaster recovery planning
• Cyber insurance and risk transfer
• Regulatory compliance (e.g., TCRA, Cybercrime Act, Tanzania)
• Cybersecurity budget allocation and investment

Training Duration:

At least 4 sessions for each training group with 3 to 6 training hours for each

Training Methodology:

• Interactive sessions incorporating discussions, Q & A, and hands-on exercises
• Simulations of realistic scenarios to test employee responses

Contact us for a free consultation.