Legal Services
Client confidentiality · payment diversion fraud
Human Risk Management
Secure Chain
Compass
Reduce human cyber risk
before it becomes a breach.
Realistic cyber scenarios. Practical phishing simulations. Explainable risk insight. Compass turns everyday decisions into safer behaviours and evidence you can stand behind.
Built by UK cyber security practitioners. Designed around real incidents.
Real-world decisions
Integrated phishing simulations
Explainable human risk
Compliance assurance
Inside Compass
One message. A real decision.
Investigate the warning signs, choose a response and see what happens next.
A moment from a Compass lesson
OutlookInbox — Rachel Adams
Inbox
Payroll — August remittance
Client bundle for review
This is an ordinary inbox on an ordinary morning. Nothing here needs a second thought yet.
Public demonstration · no sign-in required · narration off until you choose it
Why organisations choose Compass
Security incidents begin with a human moment.
An urgent payment. An unexpected sign-in. A document shared in a hurry. Better judgement under pressure is a security control worth building.
Not just awareness.
A safer response when it matters.
01
Scenario-based learning
People make real-world decisions instead of passively consuming generic awareness content.
02
Integrated phishing simulations
Reinforce judgement through practical campaigns, response tracking and targeted follow-up learning.
03
Compliance assurance
Connect staff learning to framework expectations and generate evidence for leadership, assessors and auditors.
The Compass platform
Everything needed to reduce human cyber risk.
Compass Learning
Decisions, not just content.
Realistic workplace scenarios, branching choices and practical reinforcement. People see the consequence before it becomes a real incident.
Actual Compass screen
Framework & compliance mapping
Built to support recognised compliance frameworks.
Cyber Essentials
Safer account access, updates and everyday security habits.
Mapped learning and completion evidence
Cyber Essentials Plus
Staff awareness supporting your wider technical assurance programme.
Supporting evidence, not technical verification
ISO/IEC 27001
Information security awareness, education and training.
Annex A 6.3 awareness mapping
ISO/IEC 42001
Responsible AI adoption through the separately licensed AI Academy.
Aligned to ISO/IEC 42001 principles
UK GDPR
Personal data, confidentiality and timely incident reporting.
Learning records for accountability
NHS DSPT
Staff responsibilities, patient information and confidentiality.
Healthcare pathway completion records
Mapped controlsCompletion trackingCSV evidence exportsManagement reporting
Mapping supports the awareness elements of your assurance programme. It does not certify your organisation or replace technical assessment, legal advice or formal certification.
Measurable insight
See the change.
Understand the risk.
Follow behaviour, not just attendance. Compass separates behaviour risk from business exposure and shows how much evidence each score rests on.
Human risk
Example organisation · 90-day view
Human risk score
38
From 62 · lower is better
Simulation click rate
5%
From 14% of delivered emails
Learning completion
96%
Assigned learning completed
Reporting behaviour
+37%
Relative increase in reports
Risk over time
ImprovingConfidence: medium · confidence is separate from risk
What’s driving the score
More suspicious messages reported
Assigned learning completed
Behaviour risk and business exposure assessed separately. No employee leaderboards.
Sample figures illustrate the reporting experience, not verified customer outcomes. Human risk runs from 0 to 100; lower is better.
Written for your world
Training built around the risks your people actually face.
Healthcare
Patient records · shared clinical devices
Financial Services
Payment fraud · customer impersonation
Education
Safeguarding data · ransomware incidents
Retail
Supplier compromise · card payment security
General Business
Email attacks · account compromise · insider risk
The Compass ecosystem
One platform. A stronger security culture.
01
Compass Core
Scenario-led cyber awareness
02
PhishGuard
Practical phishing reinforcement
03
AI Academy
Responsible adoption and governance
04
Compliance Evidence
Records for your assurance programme
05
Risk Analytics
Insight that informs the next action
Connected capabilities, not a standalone course library. PhishGuard and the AI Adoption Academy are available through their organisation licences.
Practitioner-led. UK-focused.
Built by cyber security practitioners.
Secure Chain brings real incident experience into everyday workplace decisions, with practical guidance people can understand and use.
- Developed by Cyber Essentials assessors
- Based on incidents encountered in consultancy engagements
- Written in plain English for non-technical people
- Captions, transcripts and learner-controlled narration
- Supportive coaching, without employee leaderboards
Guide better decisions
Give your people the experience of making the wrong decision without the consequences.
Build safer behaviours, support compliance assurance and reduce human cyber risk through realistic scenario-based learning.