Qlause Cyber Aware · International edition
Security awareness training your people will actually finish — in any country
Most breaches start with a person: a click, a typed password, a payment to changed bank details. Qlause Cyber Aware teaches every employee one reflex — Pause. Verify. Report. — through short modules that open on a real workplace scenario and end with the right move. This edition is law-neutral: privacy law is taught in general terms, with Europe’s GDPR as the worked example. 18 modules, about 200 minutes of video, and a quiz and a dated, verifiable certificate for every module. International edition 1 (October 2026) — law-neutral, with Europe's GDPR as the worked example; statistics current as at October 2026, refreshed annually.
In South Africa? The South Africa edition teaches POPIA by name →
The programme in 3:19: how a module works, the quiz and the dated certificate, the evidence ISO 27001 asks for, and the company licence. The video covers both editions.
Why companies run it
An auditor or customer asked for the evidence
ISO/IEC 27001 clauses 7.2 and 7.3 and control A.6.3, or a customer's security schedule, want proof that people were made aware — names, dates, scores.
Data-protection law expects trained staff
Privacy laws such as Europe's GDPR expect the people who handle personal data to know the rules and to report a breach fast. This is a programme you can point to.
An incident or near miss already happened
A changed-bank-details payment, a clicked link, a lost laptop. The modules are built around exactly those moments.
Generic videos don't land on the shop floor
Every module opens on a real workplace — an accounts office, a plant at 05:50, a meeting room — and is short enough to finish on a phone.
Training that never gets finished
Ten to twelve minutes a module, one habit each, a ten-question quiz. Finishing is the point.
The 18 modules
Each module: a scenario, the habit it drills, a 10–12-minute narrated video and ten “what would you do” questions (pass mark 80%). Pass a quiz and that module’s certificate is issued with the date; it is due again twelve months later. Modules 1, 2, 5 and 16 are free to watch.
Module 1 · 11:24free video
You Are the Target — Why the Human Element Matters
Tuesday, 07:52 — an email from the managing director asks you to approve a payment before her 08:00 meeting.
Habit: Pause. Verify. Report.
Module 2 · 11:40free video
Phishing: Spotting the Hook
Thursday, 16:40 — a "shared document" email lands just before home time.
Habit: The five-second scan, then go around the message.
Module 3 · 9:57
Beyond Email — Calls, Messages, Voices and Visitors
Thursday, 09:05 — your inbox floods with newsletters, then "Kyle from the IT service desk" phones to help. He just needs the code.
Habit: Hang up and call back on a number you already have.
Module 4 · 12:07
Passwords, Passphrases, Managers and MFA
The most practical module in the programme — you leave it with a method, not a lecture.
Habit: Never approve a prompt you didn't start.
Module 5 · 10:43free video
Business Email Compromise and Payment Fraud
Friday, 15:40 — a supplier's real address says their bank has changed. R386,450 later, the real supplier phones on Monday.
Habit: The call-back rule.
Module 6 · 10:45
Ransomware
Monday, 05:50 — every screen on the plant shows the same message, and the line can't start.
Habit: Disconnect, leave it on, phone.
Module 7 · 9:58
Handling Information
Wednesday, 15:40 — a supplier's rep, who also calls on your competitors, waits alone in a room with this morning's pricing still on the whiteboard.
Habit: Check before you send.
Module 8 · 10:07
Personal Data at Work — Protecting Personal Information
Tuesday, 14:10 — the payroll sheet for 214 people goes into a free AI chatbot to tidy the formatting.
Habit: Need it? Safe? Gone when done?
Module 9 · 10:38
Away From the Office — Home, Travel, Public Wi-Fi and Your Devices
Wednesday, 17:40 — a departure lounge, a phone on 3% at the charging station, and two free Wi-Fi networks with almost the same name.
Habit: Locked, close at hand, on a connection you trust.
Module 10 · 10:27
Physical Security — Tailgating, Visitors, Badges and Shoulder Surfing
Thursday, 07:48 — rain at the side entrance, a man with a laptop bag and a tray of coffees, and no hand free for his card: "Could you?"
Habit: One person, one card.
Module 11 · 10:46
Safe Use of AI Tools at Work
Tuesday, 16:05 — the claim report is due at five, so forty emails, the driver's ID number and the insurer's letter go into a free AI app on your own account. Ninety seconds later: four tidy pages, citing a clause that doesn't exist.
Habit: Whose account? What data? Is it true?
Module 12 · 11:58
Deepfakes and Voice Cloning
Thursday, 11:20 — a WhatsApp voice note from the managing director, overseas this week. It's his voice, exactly: a confidential deal, R1.9 million by three, and the CFO will confirm on a video call at one.
Habit: Verify the request — not the voice.
Module 13 · 11:00
QR Codes, Fake Pop-ups and the Click Fix
Wednesday, 08:40 — you need a data sheet, and the first search result says "Verify you are human: press Windows + R, Ctrl + V, Enter." You do it. On Friday IT calls: a password stealer ran for four minutes.
Habit: If a screen tells you what to press, scan or call — stop.
Module 14 · 12:07
Cloud and Collaboration Tools
Tuesday, 16:40 — the tender closes at five and the consultant needs the folder now. "Anyone with the link", the whole folder, pasted into a WhatsApp. Three weeks later IT shows you the access report: 41 opens from six countries — and last year's salary review.
Habit: In the cloud, sharing is a decision — who, what, for how long.
Module 15 · 11:19
Social Media and Your Digital Footprint
Friday, 16:05 — the end of your first week, and you post the photo: the new badge, the desk, the office behind you, "so proud to join", your manager's name. Monday, 08:20, "Sipho from IT support" phones: he knows your name, your manager, your start date, your badge number, and he just needs the code the app sent you. It was all in the photo.
Habit: Your footprint is the attacker's briefing — post as if they're reading.
Module 16 · 11:52free video
I Clicked — Now What? Reporting and the No-Blame Culture
Monday, 11:15 — an attachment asks you to "enable content", and you did.
Habit: Report in minutes, not hours.
Module 17 · 12:11
Insider Risk
Wednesday, 19:40 — a WhatsApp from a number you don't know: "a data research firm" pays R25 000 for a copy of the customer export you run every Monday. You already have access; nobody will ever know. You delete it. Thursday: "Forty thousand. One file. Your colleague in dispatch has already helped us." You don't reply — and you don't tell anyone. Three weeks later 2,400 customers get a very convincing invoice, and the investigation finds the same message on four phones. Including yours.
Habit: If you're asked, say so. If you're leaving, leave it. If you see it, say it.
Module 18 · 11:24
Home and Family Cyber Safety
Sunday, 18:10 — a WhatsApp from a number you don't know: "Hi Dad, this is my new number, my phone fell in the pool. Can you save this one?" Then: "I'm stuck at the garage, they won't release the car until I pay, and my banking app is locked on the new phone. Can you do R4 750 now?" You pay. Twenty minutes later your daughter walks in from the braai next door. Her phone is fine. Her number hasn't changed. The money is gone, and the number that thanked you is already deleted.
Habit: Pause. Verify. Report — at the kitchen table. The habits you learned at work are a family gift.
Editions & prices
Every licence is 12 months’ access — one price a year, renewed yearly. It is not a lifetime purchase. When access ends, the certificates you earned stay on your record.
Free
Modules 1, 2, 5 and 16
- ✓Three full videos — the week-one induction
- ✓No sign-in needed
- ✓Share them with anyone
Individual · 12 months
$19 a year — one person
- ✓All 18 modules, plus every new and updated module during your year
- ✓A quiz and a dated Certificate of Completion for every module
- ✓Your training record: every certificate verifiable online, with its due date
- ✓Renew yearly — your certificates stay on your record
Company · 12 months
From $149 a year for up to 10 people
- ✓Certificates in your company's name and logo, each verifiable online
- ✓An admin page: a join link for your staff, who has passed what, what is due again, and a CSV export for auditors and HR
- ✓When someone leaves, give their seat to the next person — their certificates stay on your record
- ✓Printable module packs for in-house sessions: toolbox talks, A3 posters, monthly nudges and attendance registers
Company licences — 12 months for everyone on it
The bigger the team, the less each person costs. The person who redeems the key becomes the admin and invites everyone else with a join link.
- Buy
Up to 10 people
$149 a year · $14.90 a person
- Buy
Up to 25 people
$299 a year · $11.96 a person
- Buy
Up to 50 people
$549 a year · $10.98 a person
- Buy
Up to 100 people
$949 a year · $9.49 a person
More than 100 people
$9 a person a year — email us
Already bought? Redeem the key on the redeem page — it sets up your company and makes you its admin. Need more people mid-year? Email us and pay the difference; your renewal date stays the same.
What it evidences
ISO/IEC 27001:2022 clause 7.3 (awareness) and Annex A control A.6.3 (information security awareness, education and training); the staff-awareness and security duties in data-protection law (for example GDPR Articles 32 and 39). Each learner’s module certificates — dates, quiz scores and certificate numbers — are the record an auditor samples. Read what ISO 27001 actually requires of awareness training.
Straight answers
Not accredited, not legal advice, and no organisation becomes “compliant” through training — training reduces the risk, it doesn’t remove it. Your organisation’s own policy and your local data-protection law are what apply to you. No phishing-simulation software is included. Statistics come from primary sources (Verizon DBIR, DLA Piper, Sophos, Interpol and others) and are dated. Qlause is a courseware publisher, not a security-services or legal provider.
Questions
How is this different from the South Africa edition?
Same eighteen modules, same stories, same quizzes and prices. The South Africa edition teaches South Africa's POPIA by name; the International edition teaches data-protection law in general, with Europe's GDPR as the worked example — so Module 8 is "Personal Data at Work", and reporting deadlines are explained the GDPR way (the regulator within 72 hours). The workplace stories, statistics and cases are kept, several of them South African. Your own organisation's policy and your local law are what apply to you.
Which modules are free?
Module 1 (You Are the Target), Module 2 (Phishing: Spotting the Hook), Module 5 (Business Email Compromise and Payment Fraud) and Module 16 (I Clicked — Now What?) are free videos anyone can watch here. The quizzes and the module certificates come with a 12-month licence — for one person or for your company.
Is the certificate accredited?
No. Each module earns a dated Qlause Certificate of Completion with a public verification page. It records that the holder completed that module and passed its quiz — the evidence ISO/IEC 27001 clause 7.3 / A.6.3 and data-protection laws expect an organisation to keep. It does not certify a person, and training on its own does not make anyone compliant.
How long does it take?
About 200 minutes of video across the 18 modules, plus a ten-question quiz per module. There is no final exam: spread the modules over the year — one or two a month works well — and each one is certified as you pass it.
How long is a certificate valid?
Each module certificate shows the date you passed it and when it is due again: twelve months later. Organisations commonly repeat awareness training every year (the card-payment standard PCI DSS, for example, requires it at least once every 12 months), and the modules are refreshed each year with current statistics. Your organisation's own policy sets the interval.
How long does access last?
Twelve months from the day you redeem your licence key — it is not a lifetime purchase. In that year you get every module, including new and updated ones, and a dated certificate for each module you pass. Renew for another twelve months at the price at that time; renew before the end and the new year is added on top. When access ends, your certificates and training record stay on your account.
Can my company enrol all its employees?
Yes — with a company licence for up to 10, 25, 50 or 100 people ($149 to $949 a year; more than 100: $9 a person). The person who redeems the key becomes the admin: they add your company's name and logo, share a join link with staff, and see who has passed which module and what falls due. Every certificate carries your company's name. The printable module packs for in-house sessions come with it. South African companies can pay by EFT against a rand invoice.
What happens when the twelve months end?
The videos and quizzes close until you renew. What you earned stays on your account: your training record and every certificate with its verification link. Print or save your certificates as PDF as well — your own copy is your permanent record.
Building the wider ISMS?
Watch the free ISO/IEC 27001:2022 masterclass.