Articles by Sarah Mitchell
empowsec publishes a free, searchable security glossary that defines common security and phishing terms in plain language, available in English and German, making it a practical reinforcement resource for onboarding and ongoing security awareness.
empowsec offers eight free public security tools - no account required. From password strength testing to live email authentication checks, these tools give anyone a quick way to spot weaknesses and illustrate the kind of awareness empowsec builds across an entire organization.
DORA is best known for ICT risk and incident reporting, but it also makes security awareness training a compulsory module for staff and management. Here is what financial entities must do, and how to evidence it.
A trusted supplier emails to say their bank details have changed. Pay the new account and the money is gone. Here is how vendor email compromise drives invoice fraud — and the verification controls that stop it.
The FBI's 2025 Internet Crime Report tallies a record $20.9 billion in losses, with business email compromise close to the top. Here's what the numbers mean and the controls that actually help.
Part 2 of empowsec's interactive page types covers the hands-on practice formats: click-to-match, ordering, fill in the blanks, email red-flag finder, and chat simulation - each designed to make learners practice the skill, not just read about it.
empowsec training is built from interactive page types - not static slides. Part 1 introduces seven of them, from simple info pages and accordions to graded quizzes, scenarios, and drag-to-match exercises.
A phishing simulation without a debrief is a test with no feedback. empowsec debriefs close that loop by explaining exactly what participants should have spotted - in their own language, at the right time.
One annual phishing test tells you where your employees stood twelve months ago. Recurring, automated phishing simulation in empowsec gives you a continuous, accurate picture of where they stand today.