Back to Security Awareness

    Security Awareness: AI at Work

    This security awareness training teaches employees to work with ChatGPT, Claude, Copilot and AI agents without leaking confidential data. They also learn to recognise the attacks criminals build with AI, such as flawless phishing emails, deepfakes and cloned voices.

    Where AI at work goes wrong

    AI tools are part of everyday work now, often before anyone has agreed on rules for them. Someone pastes a contract into a chatbot to summarise it, a colleague connects an AI assistant to their mailbox. It saves time. Where that data ends up afterwards is rarely clear to anyone.

    Attackers use the same technology. A phishing email without spelling mistakes costs them no effort any more, and a few seconds of audio are enough to imitate a voice. The old rule of thumb to look for typos helps a lot less as a result.

    In this training our ethical hackers show live what these attacks look like. Employees then practise clear agreements: what can go into an AI tool and what never should, how to check a suspicious request through a second channel, and when to report something. The AI Act also asks organisations to support the AI literacy of their staff, and this training is a concrete step towards that.

    Customer or employee data ending up in a public AI tool
    AI tools nobody approved (shadow AI)
    Phishing emails without a single typo, written with AI
    A cloned voice or deepfake of your CEO asking for a payment
    Hidden instructions in an email or document that make your AI assistant act
    AI answers that sound convincing but are wrong

    Why this matters

    Data stays inside

    Employees know which information never belongs in a public AI tool.

    Live hacking demos

    Our ethical hackers show AI phishing and voice cloning the way attackers use them.

    Measurable effect

    A phishing test with AI-written emails shows a few weeks later what has stuck.

    Frequently asked questions

    For anyone who uses AI tools or handles emails, documents and phone calls. Today that is almost every employee. No technical background is needed. For teams that build or manage AI agents themselves, we tailor the content to their own tools.

    They learn which information can and cannot go into an AI tool and how to recognise AI phishing, deepfakes and cloned voices. They also see how a hidden instruction in an email or document can mislead an AI assistant. On top of that they practise a fixed reflex: when in doubt, check through a second channel and report early.

    Article 4 of the AI Act asks organisations that use AI systems to take measures that support the AI literacy of their staff. The law does not prescribe a fixed format. A training with an attendee list and an overview of the topics covered is a clear measure you can demonstrate.

    We start with a short knowledge test and repeat it after the training. Four to eight weeks later a phishing test with AI-written emails can follow. That shows how employees respond in practice.

    Let your team work safely with AI

    Train your employees to use AI tools safely and to spot AI-driven attacks in time.