Human Risk Consulting GmbH
Awareness Live Training

Experience security.Not just hear about it.

Every day, employees decide through their behaviour whether security measures work or are quietly undermined. The live training makes these decisions visible and tangible.

Awareness. Live. On site.
0live trainings carried out
0industries covered
0of our simulations reach the defined protection targets
Awareness live training

Are strangers in your premises questioned?

Top 5 Physical intrusion attempts rank among the top threats in the current threat landscapeBSI State of IT Security 2024
0 of our simulations reach the defined protection targetsHRC internal data
3–10 min average time until unauthorised access is gainedHRC internal data

Technical safeguards are the foundation. Their effectiveness depends on everyday behaviour. Our live training targets exactly this interface.

Approach

Our approach to the awareness live training

  1. Step 01 Preparation Define scope & objectives
  2. Step 02 Simulation Realistic on-site scenarios
  3. Step 03 Debrief Direct awareness-raising
  4. Step 04 Result Internal communication
In detail

In detail: from preparation to result

01

Preparation and scope definition

Every awareness live training starts with joint coordination. Objectives, scope and sensitive areas are defined so that the training is realistic, effective and organisationally appropriate.

  • Joint definition of objectives and scope
  • Agreement on sensitive areas and boundaries
  • Realistic, industry-specific scenarios
  • Legal safeguards and escalation paths
02

Realistic on-site simulations

Our trainers carry out targeted social engineering simulations in the working environment. This includes crossing organisational boundaries, viewing documents or specifically testing access and conduct rules.

  • Test access controls and reception areas
  • Enter sensitive areas and offices
  • Simulate viewing and removing documents
  • Reach leadership and management levels
03

Direct debrief and awareness-raising

Immediately after the simulation comes the reveal. In a short, situation-related exchange, what happened is reflected upon and put into context. In this way a situation immediately becomes a gain in learning and awareness.

  • Direct feedback on the observed behaviour
  • Appreciative, solution-oriented communication
  • Convey the role of employees as a pillar of security
  • The dialogue can be deepened if needed
04

Result and internal communication

Afterwards you receive a compact summary of the awareness measures carried out. It is prepared so that it is suitable for internal communication and strengthens security awareness beyond those directly involved.

  • Compact summary of the results
  • Prepared for internal stakeholders
  • Make security culture visible and consolidate it
  • Basis for long-term development
Differentiation

Why physical security has to be tested

Typical weaknesses

  • Uncontrolled access areas and open doors
  • Lack of security awareness among employees
  • Outsiders are let in out of politeness
  • Lack of vigilance towards convincing pretexts
  • No verification mechanisms for visitors and suppliers

HRC live training impact

  • Make everyday security behaviour tangible
  • Strengthen employees as a central pillar of security
  • Understand reactions and frame them positively
  • Concrete recommendations for everyday work
  • Anchor security culture in the long term
Voices from our projects
I was the one who let him in. [...] Later I sat with the trainers in the meeting room and thought, here comes the reproach. But it was completely different. We calmly discussed how I could have noticed and what options there are to keep a clear head. Since then I feel much more confident in handling such situations, without feeling that I am being unfriendly or unprofessional.
— Receptionist
[...] That was the first time I really took awareness training seriously.
— Head of Plant Security
As part of an awareness measure at our bank we were supported by the team around Michael Willer. Very professional and efficient. We gained very good insights and also developed measures from them. We want to continue working with a partner like this. Thank you for the great work and the cooperation.
— CISO
Further services

Robust protection for your corporate security

FAQ

Frequently asked questions

How does the live training differ from a pentest?

In the live training the focus is on awareness-raising, not on vulnerability analysis. After every simulation the situation is immediately resolved and a short training impulse is given. In a pentest the attack remains covert and is only documented in the final report.

Do employees know about the training in advance?

No. The simulations are unannounced so that authentic reactions arise. After the reveal, the experience is put into context and conveyed as a positive learning impulse.

Which areas does the training cover?

Depending on the agreed scope, access controls, reception areas, offices, sensitive rooms and organisational interfaces can be tested. The approach is defined together in advance.

How do you make sure nobody is exposed?

The debrief is appreciative and solution-oriented. It is not about control but about building awareness. The results are anonymised and prepared as a compact summary.

Satellite dish in a landscape
Next step

Ready to put your security to the test?

A first conversation: no obligation, confidential, and as equals. Together we work out where your biggest risks lie.