Identity & Social Engineering Defense
Attackers increasingly log in rather than break in. Build the awareness and identity controls that stop phishing, account takeover, help-desk manipulation and impersonation.
Request TrainingAll ProgramsIdentity is the new perimeter
When an attacker holds a valid account, they look like a legitimate user. Protecting identity means protecting both people and systems.
Phishing and smishing
Emails, texts and messages designed to steal credentials or trigger risky actions.
Account takeover
Stolen or reused passwords and tricked approvals give attackers access.
Help-desk manipulation
Callers impersonate employees to reset passwords or authentication methods.
Deepfakes and impersonation
AI-generated voices, video and messages make fakes harder to spot.
What is covered
Human awareness combined with practical identity controls.
- Spotting phishing, vishing, smishing and QR-code scams
- Understanding pretexting, urgency and authority tactics
- Safe password and passkey practices
- Multi-factor authentication and approval fatigue attacks
- Verifying identity for help-desk and sensitive requests
- Protecting accounts on personal and work devices
- Social media oversharing and targeted reconnaissance
- Reporting suspicious activity quickly and without blame
Training tracks
All employees
Everyday recognition and reporting of phishing and impersonation.
Help desk and IT support
Identity verification procedures and resisting manipulation.
High-risk roles
Finance, HR, executives and administrators who are frequent targets.
Leadership
Identity governance, accountability and incident decisions.
What your organisation gains
- Fewer successful phishing and takeover attempts
- Staff who recognise manipulation and report early
- Stronger help-desk and account recovery procedures
- Better use of multi-factor authentication
- Reduced credential theft and unauthorised access
- A positive, blame-free reporting culture
How it works
A simple, collaborative process.
Assess
We review how identity and access work across your teams and tools.
Tailor
We build scenarios matched to your roles and the threats you face.
Train
Online modules, live workshops and phishing simulations.
Measure
We track reporting and behaviour to guide ongoing improvement.
Frequently asked questions
Do you run phishing simulations?
Yes. Simulations can be included and are used to teach, not to punish.
Can you train our help desk specifically?
Yes. We cover verification scripts, escalation rules and how to handle pressure from convincing callers.
Does this cover multi-factor authentication?
Yes. We explain why MFA matters, how attackers try to bypass it and how people should respond to unexpected prompts.
Is it suitable for non-technical staff?
Yes. Everything is explained in plain language with realistic examples.
Make every login harder to steal
Tell us about your teams and we will recommend the right identity and social engineering training.
Contact INCYB