Cybersecurity training that helps your employees spot a scam in time
Eight short chapters and 41 situations from email, phone calls, the office and business travel. Everyone works through them online, and you follow the whole team’s progress in one place.
Attackers don’t call the server room. They call reception.
An attacker often doesn’t need to break into your network. It is enough for someone in a hurry to pay, click or share a code: an invoice gets paid into someone else’s account, a password ends up on a fake page, or an opened attachment brings operations to a halt. What helps is a simple habit: pause and verify. That is why staff training has its place in NIS2 and in Czech cybersecurity law, among the risk management measures.
Management must approve the measures, oversee them and complete training itself.
- Directive
- (EU) 2022/2555
- Czech Republic
- Czech Act No. 264/2025 Coll. on cybersecurity, in force since 1 November 2025
- Decrees
- No. 409/2025 Coll. and No. 410/2025 Coll.
- Training
- training and basic cyber hygiene as a risk-management measure, Article 21(2)(g)
- Management
- Article 20
- Supervision and guidance
- NÚKIB
- Sources
- EUR-Lex · e-Sbírka · NÚKIB
- an invoice with new bank details
- an address one letter off
- a call from ‘the boss’
- text messages and QR codes
- requests to approve a sign-in
- passwords and password managers
- where company data can go
- working from home and on the road
How the online training works
75 to 90 minutes per person in total- 01 Access All it takes is an email invitation or a code sent out by your company.
- 02 Chapters Eight topics, each with a video under two minutes and a text to read.
- 03 Situations 41 practice decisions where a mistake costs nothing.
- 04 Final check 12 questions at the end; a score of at least 75% is a pass.
- 05 Overview You follow the whole team’s progress in your company account.
Syllabus: eight topics from an ordinary working day
Each chapter has a video under two minutes, a four-to-five-minute read and practical situations.
-
01
Attacks target people
Why urgency and authority work on sensible people, the six forms pressure usually takes, and the two questions that stop it.video 2 mintext 5 minsituations 2 -
02
Phishing: messages, links and attachments
How to check the sender and the real destination of a link before you click, and why an attachment calls for caution.video 2 mintext 5 minsituations 7 -
03
Phone calls, text messages and voices that aren’t real
A message ‘from the bank’, a manager in a hurry and a QR code. A voice can be faked; a procedure can’t.video 2 mintext 4 minsituations 6 -
04
Passwords and signing in
Long passwords, a different one for every service, a password manager that remembers them for you, and sign-in prompts you never asked for.video 2 mintext 4 minsituations 5 -
05
Devices, updates and unknown files
Why you shouldn’t put off updates, what to do with an unknown USB stick and what not to leave lying on your desk.video 2 mintext 4 minsituations 5 -
06
Company data and sharing
Who you are sending a file to, how much of it they actually need and where you may upload it, AI tools included.video 2 mintext 4 minsituations 5 -
07
Working outside the office
How to work safely on the road and from home, and what to do when a stranger is at the door or your laptop is left on the train.video 2 mintext 4 minsituations 6 -
08
When something happens
Who to tell and how quickly, what is best left untouched, and why a colleague’s access should be closed as soon as they leave.video 2 mintext 4 minsituations 5
Final check
Twelve questions with a pass mark of 75%. Successful participants receive a personal certificate, and the company sees their result in the overview.Course for management
It starts with the same eight chapters and continues with three more on management responsibility: what NIS2 expects of management, how incidents, deadlines and suppliers work, and which promises about training are best avoided. It ends with 18 questions and a personal certificate.Five seconds to decide. Give it a go.
This is what phishing practice looks like in the course, cut down to two samples. Scammers like to hide behind banks, couriers and well-known services, so you will meet them here under their real names. Every address, number and message text is invented, though, and nothing leaves this page.
Two domains, five seconds
A genuine address and a fake side by side, five seconds to spot the fake, three rounds in total. If you’d rather not rush, switch the countdown off.
A genuine address and a fake side by side, five seconds to spot the fake, three rounds in total. If you’d rather not rush, switch the countdown off.
Morning inbox
Four messages are waiting for you this morning. A supplier sends an invoice, but with different bank details from last time. A portal confirms a change you really did request. Someone shares a document from an address that doesn’t look right. And the usual newsletter has arrived. Where does each one belong?
Four messages are waiting for you this morning. A supplier sends an invoice, but with different bank details from last time. A portal confirms a change you really did request. Someone shares a document from an address that doesn’t look right. And the usual newsletter has arrived. Where does each one belong?
In the course, practice is more varied and comes in 17 forms. You might compare an invoice with the supplier’s record and look for what doesn’t match. In a story with several endings, you decide whether to send an advance payment that ‘the director’ asks for in a voice message. And on your phone, you turn down a series of sign-in requests you never started.
One course for the team, another for those responsible for it
Employees learn to recognise a scam, and management also finds out what NIS2 expects of it. You order employee training and the management course online, each separately.
For employees
The package only determines how many people you train. As soon as you have paid, colleagues can receive an email invitation, or you can give them a code. from 1 990 Kč Annual price per company, excl. VAT.- Eight chapters with video and text
- 41 real-life situations and a final check
- Personal certificate, team overview and exports
For management
Designed for managing directors, executives and others who make decisions in the company. It is purchased separately, on top of the packages, and ends with its own final check and certificate. 2 990 Kč Annual price per company, excl. VAT.- The eight chapters for employees
- What NIS2 expects of management
- Incidents, reporting deadlines and suppliers
- 18 questions and a personal certificate
What NIS2 and Czech law say about training
What NIS2 is
NIS2 is Directive (EU) 2022/2555 on measures for a high common level of cybersecurity across the Union. The Czech Republic transposed it through Czech Act No. 264/2025 Coll. on cybersecurity, in force since 1 November 2025, and through Decrees No. 409/2025 Coll. and No. 410/2025 Coll. Supervision of the Act and guidance on it are provided by NÚKIB, the Czech National Cyber and Information Security Agency.
What it says about training
Two articles of the Directive concern training. Under Article 20, management approves the measures, oversees them and undergoes training itself. Article 21(2)(g) lists basic cyber hygiene practices and cybersecurity training among the risk management measures. Each organisation decides the scope of its training itself, based on its category and risks.
What the course is and isn’t
The course is practical preparation for employees and management: everyone who completes it receives a personal certificate, and the company gets an overview of who has been trained. It is not legal advice, certification of the organisation or proof of compliance. Whether and how the law applies to you is for you to assess, on your own or with an expert.
Directive (EU) 2022/2555 on EUR-Lex · Czech Act No. 264/2025 Coll. on cybersecurity in e-Sbírka · NÚKIB
What cybersecurity training costs for your company
-
Micro
1 990 Kč up to 5- Chapters, practical situations and final check
- Personal certificate for everyone
- Invitations and an overview of who has finished
- Certificate records and exports
-
Team
Most popular4 990 Kč up to 25- Chapters, practical situations and final check
- Personal certificate for everyone
- Invitations and an overview of who has finished
- Certificate records and exports
-
Business
19 990 Kč up to 150- Chapters, practical situations and final check
- Personal certificate for everyone
- Invitations and an overview of who has finished
- Certificate records and exports
-
Enterprise
by arrangement 151 or more- Chapters, practical situations and final check
- Personal certificate for everyone
- Invitations and an overview of who has finished
- Certificate records and exports
We’ll help you choose the right package for your company
Not sure how many places you need, or whether to add the management course to your package? Write to us and you’ll get an answer within one working day.
- Whether you choose Micro, Team or Business, the features are the same: invitations, team overview and exports. You only pay for the number of people.
- The course is available in Czech and English.
- Every certificate carries a number that anyone, even outside your company, can use to check that it is genuine.
Questions about the training and NIS2
Have a question that isn’t answered here? Send it to us via the enquiry form on responsiblo.com. Send a question →
Can an individual take the course for free?
No, the course is bought by companies and organisations; even the smallest package, Micro, is designed for a team of up to 5 people. You can, however, try both samples in the Try it section without paying.
Is the course issued by the European Union or NÚKIB?
No, the course comes from responsiblo, an independent learning platform. The certificate belongs to a specific person and states that they completed the course and passed the final check. It makes no claim about the company or its compliance with regulations.
Is online training enough for NIS2?
No, training covers the human side, and NIS2 also expects technical and organisational measures. Which obligations apply to you needs to be assessed within your company or with an expert. The starting points are the text of the Directive on EUR-Lex and NÚKIB’s guidance on Czech Act No. 264/2025 Coll. on cybersecurity.
What do the practical situations look like?
The course has 41 situations in 17 different forms. One moment you put together an incident report from the facts available, the next you build a strong password or put the steps to take after losing a laptop in the right order. Straight after each choice, you find out why it was or wasn’t a good one.
How long does the training take?
Allow 75 to 90 minutes for the whole course, including practice and the final check. No video in any chapter is longer than two minutes, and the same content is also available to read below each one.
Is the course suitable for managing directors or the IT department?
Managing directors and executives have their own course, which adds three chapters on the role of management under NIS2 to the eight core chapters, with its own final check and certificate. For IT administrators and security specialists, the course is a foundation, but it does not replace their more in-depth professional training.
How often should the training be repeated?
The course doesn’t prescribe a fixed interval; each organisation sets one according to its own risks and policies. The personal certificate is valid for 12 months, after which the course can be retaken to earn a new one.
Can the course be taken in English?
Yes, the course is available in Czech and English, so colleagues who don’t speak Czech can take it too. The English version uses international brands in its exercises.
Make sure the first fake invoice ends in a question, not a payment
Pay online and your first colleagues can open the course today.