Security awareness training your team will actually engage with
Reduce phishing risk, improve staff behaviour and build a stronger security culture with Goldphish – supported locally by Black Swan Cyber Security Solutions.
Most cyber incidents don’t start with sophisticated attacks. They start with everyday moments. A rushed click. A convincing email. A reused password. Goldphish helps your team spot those risks before they turn into real problems, using simple training, realistic phishing simulations and clear reporting. We help businesses across Chesterfield, Sheffield and the surrounding areas put the right awareness programme in place, without adding more complexity.
Make your people harder to phish, without boring them senseless.
Goldphish gives small businesses, schools, care providers and local organisations a simple way to run security awareness training, simulated phishing and progress reporting without adding another complicated platform to manage.
Black Swan Cyber Security Solutions helps businesses across Chesterfield, Sheffield, Derbyshire and South Yorkshire choose, set up and run the right cyber awareness programme for their people.
Still tracking staff cyber training on a spreadsheet? There is a better way.
Goldphish now hosts the NCSC Cyber Security for School Staff course, giving schools and multi-academy trusts a cleaner way to deliver NCSC cyber security training and track completion.
Training delivered. Completion tracked. Compliance proved, without the certificate chaos. It is useful for schools that need cyber security training for school staff, evidence for governors, DfE Cyber Security Standards, RPA expectations, Cyber Essentials preparation and internal reporting.
Instead of chasing screenshots, certificates and spreadsheet updates, you can give staff a simple training route and keep evidence in one place.
- Host and deliver the NCSC school staff cyber training
- Track who has completed the course
- Help evidence cyber awareness training for schools and academy trusts
- Reduce certificate admin for SBMs, school leaders and IT teams
Most cyber incidents do not start with elite hacking.
They often start with a rushed click, a reused password, a convincing fake login page, a spoofed invoice, or someone trying to be helpful under pressure.
That is why awareness training cannot be a once-a-year tick box exercise. Your team needs short, regular, relevant reminders that help them spot real-world threats before they become business problems.
What we often see
- Staff training is only done when insurance or compliance asks for it.
- Phishing simulations feel punitive rather than useful.
- No one knows who clicked, who reported, or who needs extra help.
- Training platforms are too heavy for smaller teams to run properly.
- Business owners know people are a risk, but do not know where to start.
One customer admitted they hadn't run awareness training for years because it felt like another annual compliance task.
Small, regular reminders proved much easier to fit around everyday work.
Build better security habits, one small action at a time.
Goldphish is designed to make cyber security awareness easier to deliver and easier for people to complete. The training is bite-sized, visual and practical. The phishing simulations help staff practise safely. The reporting gives you evidence of progress.
Awareness training
Short, engaging learning that helps people understand phishing, passwords, identity theft, ransomware, AI threats and safer day-to-day behaviour.
Simulated phishing
Realistic phishing campaigns that let your team practise spotting suspicious emails without putting the business at risk.
Active reporting
Encourage staff to report suspicious emails and give your business clearer behavioural signals.
Measurable impact
Track participation, clicks, reporting rates and progress so you can show improvement over time.
Short cyber awareness videos your team might actually watch.
These examples show the kind of visual, bite-sized training that makes Goldphish easier for people to engage with. No hour-long lectures. No death by PowerPoint. Just practical reminders that help staff spot real risks.
Security awareness training that does not need a full-time manager.
Goldphish works well for organisations that want proper cyber awareness training without a complicated rollout. It is especially useful for smaller teams, growing businesses, schools, nurseries, charities, parish councils and care providers that need training to be simple, repeatable and easy to evidence.
Simple setup
Cloud-based, straightforward and built so your programme can get moving quickly.
Unlimited campaigns
Run regular training and simulated phishing without worrying about separate bolt-ons.
Useful content
Micro-modules, videos and interactive training covering common cyber risks people actually face.
Compliance support
Useful evidence for cyber insurance, Cyber Essentials preparation, internal risk management and board reporting.
Behavioural nudges
Keep awareness alive through regular reminders rather than relying on one annual session.
NCSC-accredited content
Training content accredited by the UK’s National Cyber Security Centre.
Goldphish options for different types of organisation.
Goldphish Premium
For organisations that want to run their own annual security awareness programme with training, phishing simulations, scheduling and reports in one platform.
- Unlimited training campaigns
- Unlimited phishing simulations
- Template builder and reporting
Goldphish Managed
For teams that want the benefits of Goldphish Premium, but with the programme managed for them.
- Annual programme setup
- Ongoing training campaigns
- Monthly reporting and support
Goldphish Content
For organisations that already have a learning management system and need cyber security content they can plug into it.
- SCORM 2004, SCORM 1.2 and xAPI
- Localised content available
- Updated and refreshed content
You do not just need a training platform. You need it to work in the real world.
We understand your risk
We look at your sector, your team size, your Microsoft 365 setup, your compliance needs and the threats your people are most likely to face.
We recommend the right option
Premium, Managed or Content. We help you avoid buying more than you need, while still covering the important gaps.
We help you launch properly
We help position the training positively, so staff see it as support rather than a trap.
We connect it to wider protection
Awareness works best alongside email security, identity monitoring, endpoint detection and tested backups.
Goldphish security awareness training for Chesterfield, Sheffield, Derbyshire and South Yorkshire.
Black Swan Cyber Security Solutions supports small businesses, schools, care providers, professional services firms, charities and local organisations across Chesterfield, North East Derbyshire, Sheffield, Dronfield, Worksop and the surrounding areas.
If your organisation needs cyber security awareness training for staff, simulated phishing, cyber insurance evidence, Cyber Essentials support, Microsoft 365 security, or a more joined-up approach to reducing human risk, we can help you put the right programme in place.
Awareness training is important. It should not sit on its own.
Goldphish helps reduce the chance of staff falling for phishing, credential theft and social engineering. It is strongest when it sits inside a wider cyber security approach.
Email Security
Block more phishing, impersonation and malicious emails before they reach inboxes.
Identity Threat Detection
Spot suspicious Microsoft 365 logins, account misuse and identity-based attacks.
Managed EDR
Add 24/7 endpoint monitoring, investigation and response.
Microsoft 365 Backup
Make sure recovery is possible when email, files or accounts are compromised.
Goldphish FAQs
Is Goldphish suitable for small businesses?
Yes. Goldphish is a good fit for small businesses that need straightforward cyber awareness training, simulated phishing and reporting without a heavy internal admin burden.
Can Goldphish help with cyber insurance requirements?
Security awareness training is often requested by insurers. Goldphish can help you evidence training activity, phishing simulations and progress, but insurance requirements vary. We can help you review the wider controls too.
Does Goldphish replace email security?
No. It helps people spot and report threats, but it should sit alongside proper email security, Microsoft 365 protection, identity monitoring and endpoint detection.
What is the difference between Goldphish Premium and Goldphish Managed?
Premium gives you the platform to run your own awareness programme. Managed adds a service layer for organisations that want the programme handled for them.
Can we use Goldphish content in our own LMS?
Yes. Goldphish Content is designed for organisations that already have a learning management system and want ready-made cyber security awareness content.
Can Goldphish track the NCSC Cyber Security for School Staff training?
Yes. Goldphish can host the NCSC Cyber Security for School Staff course and track completion, which helps schools, MATs and academy trusts move away from certificate screenshots and spreadsheet chasing.
Is this useful for DfE Cyber Security Standards and RPA evidence?
It can help you evidence staff cyber security awareness training, but it should sit alongside your wider controls, including MFA where appropriate, secure backups, patching, incident planning and clear joiner/leaver processes.
Who Goldphish works well for (and who it doesn’t)
Good fit
- Small businesses that have never done proper awareness training
- Teams relying on Microsoft 365 with no real visibility of risky behaviour
- Schools, care providers and local organisations needing simple, repeatable training
- Businesses working towards Cyber Essentials or cyber insurance requirements
- Teams that want something easy to run without a full-time admin
Probably not right
- Organisations already running a mature, fully managed awareness programme
- Teams looking for a tick-box annual course with no follow-up
- Businesses expecting training alone to solve cyber security
- Large enterprises needing highly bespoke, internal training frameworks
If you’re somewhere in the middle, that’s usually where we start. We’ll help you work out what level of training actually makes sense for your team.
Most businesses we speak to sit somewhere between ‘we’ve done nothing’ and ‘we’ve done something once’. That’s exactly where this works best.
Give your team training they might actually remember.
If you are based in Chesterfield, Sheffield, Derbyshire, South Yorkshire or nearby, we can help you decide whether Goldphish is the right fit and how it should sit alongside your wider cyber security controls.
Has your cyber insurance form asked about staff training?
Some cyber insurance forms now ask about security awareness training, anti-phishing training, phishing simulations and social engineering fraud controls. If you need to show useful evidence for a broker, insurer or client, this guide explains what small businesses should check before ticking the box.
Read the cyber insurance and staff training guide
Meet Kevin: Founder of Black Swan
Concerned about cyber security? Need advice or a tailor-made quote? Kevin is here to help you!
From actionable advice to helping you to see where you could be at risk, Kevin will help you to get your business on a path that is secure-by-design and ready for the unthinkable.
Ready to replace sleepless nights with peace of mind? It all starts with an informal chat!
Either schedule a call by selecting a suitable date and time on the calendar or by clicking the button below to send us a message.
Stay ahead of cyber threats - Subscribe to the Black Swan newsletter
Protect your school or business with expert advice tailored to schools and small businesses. Get the latest cyber threat insights, practical data protection tips, and guidance on password security, ransomware prevention, and compliance – all delivered straight to your inbox.
Join the Black Swan community today and take charge of your cyber security.
Click here to preview an example newsletter and see what you’ll gain by subscribing!