Cyber Security Awareness Month 2026
Ten scenarios your people will actually meet this year, with the reasoning explained as you go. Six minutes, a certificate at the end, and nothing to sign up for.
Not the usual awareness training
Ten situations that land in real inboxes and on real laptops. Several have an obvious answer that turns out to be wrong. The reasoning arrives the moment you answer, not at the end when you have stopped reading.
Written by an IASME appointed Certification Body for Cyber Essentials and IASME Cyber Assurance, and a Defence Cyber Certification Body, so every scenario is tagged with the control behind it.
- Ten questions, about six minutes. No registration, no email required.
- An explanation after every answer, including why the plausible wrong ones are wrong.
- A named certificate on passing, downloaded instantly and signed so it can be verified.
- Send it to your team. Everyone gets their own certificate. Nothing to set up.
Awareness is half of it
Nine of the ten scenarios are survivable because of something technical sitting behind the person: multi-factor authentication, updates applied inside fourteen days, users without administrator rights, software that cannot be installed on a whim, a home router that is not answering the internet.
Those are the five Cyber Essentials controls. Trained people and configured systems cover each other's failures, and either one alone is a single point of failure.
Solusec assesses and issues Cyber Essentials and IASME Cyber Assurance certificates directly, as an IASME appointed Certification Body, and delivers Defence Cyber Certification assessments for organisations in the MOD supply chain.
Running it across your organisation
Send your team the address below. Each person works through it and downloads their own certificate. There is nothing to arrange and no licence to buy.
solusec.co.uk/cyber-security-awareness-month/
Collecting the certificates gives you a dated record per person, which is what an insurer, a client questionnaire or an IASME Cyber Assurance assessment will ask for. Each one carries a verification link, so whoever asks can check it themselves.
Common questions
Is it free, and do I have to give you my email?
Free, no sign-up. The certificate downloads the moment you pass. The email box on the results page is optional: leave it blank and you still get the certificate, you just will not get a copy by email.
What does the certificate prove?
That one named person completed this assessment on that date and scored what it says. It is signed, so editing the PDF afterwards breaks the verification link. It is not a Cyber Essentials certificate and does not certify an organisation.
Can we use it as evidence of staff awareness training?
For most purposes yes. Insurers, client questionnaires and IASME Cyber Assurance all ask whether staff receive security awareness training, and a dated certificate per person is reasonable evidence. It is not a substitute for a full programme if you are working towards something that specifies one.
Do you store our names or answers?
Your answers, no: those never leave your browser and are not sent anywhere. Your name, organisation, email, date, score and certificate details are written to a completion log, which is the point of a training record and means we can send you your certificate again if you lose it. The log is not reachable from the web and plays no part in verifying a certificate.
Who can see the completion log, and can we have it?
Solusec and whoever administers the site. It is not published, not indexed and blocked from being fetched over the web. Ask and we will send you the rows for your organisation, which is usually what an insurer or an assessor wants to see.
Can I send this to my whole team?
Yes, that is what it is for. Share the address and each person gets their own certificate. Nothing to set up, no licence.
What is the pass mark?
Seven out of ten. Below that you get the full explanations and can retake it immediately. The explanations are the training; the score is the gate.
How does this relate to Cyber Essentials?
Every question but one is tagged with the Cyber Essentials control it relates to. The last is deliberately not covered by the scheme, because invoice fraud attacks your process rather than your technology.
Related
Question 1 of 10
Your certificate
Your name, organisation and email are recorded in Solusec’s completion log, so your employer can show who has done the training. Your answers are not: those never leave your browser.
Every question, and why
Worth a minute even if you scored ten. The reasoning is the part that transfers.