Cyber Security Awareness Training
Practical Cyber Security Training for Defence Industry and Critical Infrastructure
People remain one of the most targeted attack vectors in any organisation. Effective cyber security awareness training reduces human risk by equipping staff with the knowledge and confidence to recognise, respond to and report cyber threats before they become security incidents.
Calexi delivers practical, instructor-led cyber security awareness training for Defence industry, critical infrastructure and other regulated organisations across Australia. Our training is tailored to your operational environment and designed to support your organisation’s security, contractual and regulatory obligations.
Whether you require annual workforce awareness training, privileged user education, board and executive briefings or customised security workshops, our courses focus on practical skills that can be applied immediately.
Annual Cyber Security Awareness Training
Annual cyber security awareness training helps employees recognise and respond to today’s most common cyber threats while reinforcing a strong organisational security culture.
Topics include:
- Phishing and business email compromise
- Social engineering
- Password security and multi-factor authentication
- Safe web browsing
- Ransomware
- Data handling and information protection
- Mobile device security
- Remote and hybrid working
- Removable media
- Incident identification and reporting
Privileged User Security Training
Users with elevated privileges are among the highest-value targets for cyber attackers. This course provides administrators and privileged users with the knowledge required to securely manage critical systems and reduce administrative risk.
Training covers:
- Administrative account security
- Privileged Access Management (PAM)
- Secure remote administration
- Password and multi-factor authentication best practice
- Administrative workstation security
- Common attack techniques targeting privileged accounts
- Logging, auditing and accountability
- Secure configuration management
- Change management
- Incident response responsibilities
Board and Executive Cyber Awareness
Directors and executives play a critical role in managing cyber risk and organisational resilience.
This course provides practical guidance on governance, strategic risk and executive decision making during cyber security incidents.
Topics include:
- The current cyber threat landscape
- Governance responsibilities
- Cyber risk as business risk
- Essential Eight and organisational maturity
- Supply chain security
- Security of Critical Infrastructure (SOCI) obligations
- Defence Industry Security Program (DISP)
- Incident response and executive decision making
- Business resilience
- Regulatory and contractual obligations
Custom Cyber Security Training
Every organisation faces different threats, technologies and regulatory obligations.
Calexi develops customised cyber security training aligned to your systems, policies, operational environment and business objectives.
Examples include:
- Microsoft 365 security
- Secure software development
- Defence industry cyber security
- Incident response
- Secure remote working
- Artificial Intelligence security
- Social engineering
- Insider threats
- Secure system administration
- Organisation-specific policies and procedures
Supporting Regulatory Requirements
Our cyber security awareness programs are designed to support organisations in meeting the security awareness and personnel education requirements of recognised security frameworks and contractual obligations, including:
- Defence Industry Security Program (DISP)
- Security of Critical Infrastructure Act (SOCI)
- Essential Eight
- ASD Information Security Manual (ISM)
- Protective Security Policy Framework (PSPF)
- ISO/IEC 27001
- NIST Cybersecurity Framework
Training can also be customised to align with your organisation’s internal security policies, customer requirements and contractual obligations.
Industries We Support
- Defence Industry
- Critical Infrastructure
- Defence Supply Chain
- Engineering
- Professional Services
- Technology organisations operating in regulated environments
Proven Capability in the Field
![A military officer in camouflage uniform stands before a futuristic holographic interface. The display shows a glowing radar, world map, graphs, and charts, with a central glowing arrow pointing upward labeled “Strategic Alignment.” The scene symbolizes clarity, visibility, and aligning Defence cyber capabilities with strategic objectives.]()
Defence Capability Review
Calexi completed a Defence cyber capability review in just six weeks, engaging hundreds of stakeholders to provide clear visibility of the current state, align future technologies with strategy, and deliver actionable, risk-based recommendations with strong buy-in.
![A glowing digital shield with a central padlock symbol, surrounded by eight evenly spaced turquoise-blue nodes connected in a circular pattern. The background features a dark blue gradient with subtle circuit lines, symbolizing cyber security, Essential Eight compliance, and Defence-level protection.]()
SME Essential Eight Compliance
A Defence industry SME required Essential Eight compliance to execute a Defence contract. Calexi delivered a full uplift in just four weeks, achieving ML1 across all areas, ML3 in key controls, and DISP membership within 3 months — reducing risk from very high to low/medium.
![Digital illustration showing a business handshake symbolizing a seamless Microsoft 365 migration. On the left, dark legacy servers with red warning lights represent outdated, unreliable systems. On the right, a glowing blue cloud with Microsoft 365 app icons (Word, Outlook, Excel) represents the modern, resilient cloud environment. The handshake in the center conveys trust, collaboration, and smooth transition.]()
Microsoft 365 Service Migration
A Defence SME struggling with multi-day outages migrated to Microsoft 365 under Calexi’s leadership. The seamless migration achieved zero downtime, 100% staff adoption, and significant resilience uplift, enabling faster collaboration and growth.
Why Organisations Choose Calexi
Our instructors are experienced cyber security practitioners who work with regulated organisations every day.
Rather than delivering generic awareness presentations, we provide practical, engaging training built around current threats, operational experience and real-world scenarios.
Every course is designed to deliver measurable improvements in cyber security awareness and organisational resilience.
Our training includes:
- Developed specifically for regulated industries
- Delivered by experienced cyber security practitioners
- Australian-developed content
- Current real-world attack scenarios
- Practical demonstrations and discussions
- Customised to your organisation
- Available on-site or remotely
- Supports annual awareness programs
- Completion certificates for participants
Our objective is simple: build confident people who make better security decisions every day.
Frequently Asked Questions
Cyber security awareness training should be delivered at least annually as part of your organisation’s ongoing security program. Additional training is recommended when new cyber threats emerge, significant technology or policy changes occur, following security incidents, or when staff move into privileged or high-risk roles.
Regular refresher training helps reinforce secure behaviours, keeps employees informed of evolving threats and supports organisations meeting the ongoing security awareness requirements of frameworks such as the Defence Industry Security Program (DISP), the Security of Critical Infrastructure (SOCI) Act, ISO/IEC 27001 and other contractual or regulatory obligations.
Yes. Our training is designed to support organisations implementing the Essential Eight and meeting personnel security awareness obligations under frameworks including DISP, the Security of Critical Infrastructure Act (SOCI), the ASD Information Security Manual (ISM), the Protective Security Policy Framework (PSPF) and ISO/IEC 27001.
Yes. Every course can be customised to reflect your technologies, security policies, procedures, regulatory obligations and operational environment.
Yes. Participants receive a certificate of completion that can assist organisations maintaining training records for audits, contractual obligations and internal governance.
Yes. We deliver instructor-led cyber security awareness training on-site throughout Australia.
Yes. Training can be delivered remotely using secure online platforms while maintaining participant engagement and interaction.
Yes. Board and executive training focuses on governance, organisational risk, strategic decision making, regulatory responsibilities and cyber resilience rather than day-to-day user security awareness.
Course duration depends on the audience and objectives. Annual awareness training typically runs for 60 to 90 minutes, while executive workshops and customised technical courses may range from two hours to a full day.
Yes. Phishing simulations can be incorporated into awareness programs to reinforce learning, assess user behaviour and identify opportunities for further education.
Yes. We regularly develop customised training using client policies, technologies, operational scenarios and recent cyber threats relevant to your organisation.
Privileged user training is recommended and may be a regulatory requirement for system administrators, cloud administrators, network engineers, database administrators, security personnel, help desk staff with elevated access and anyone responsible for administering critical systems.
Yes. Annual refresher training helps staff remain aware of emerging cyber threats, reinforces secure behaviours and supports ongoing compliance obligations.
Yes. Attendance records, certificates and training documentation can assist organisations demonstrating that ongoing cyber security awareness activities have been implemented as part of broader governance and compliance programs.
Get In Touch
Strengthen your organisation’s first line of defence through practical cyber security awareness training designed for regulated industries.
Whether you require annual workforce awareness, privileged user education, board-level cyber security training or a customised program aligned to your business, Calexi can develop a solution that meets your operational and regulatory requirements.