Human factor
60%
Around 60% of breaches involve human error or manipulation.
Source: Verizon DBIR 2025
Cybersecurity awareness and training
Turn your people from a security gap into your strongest defence.
From year-round managed awareness programmes to online and classroom training, executive briefings and full-day workshops. Your people recognise risk and act on it, and you can measure the change.
Organisation human riskIllustrative view
Human risk score
48/100
Medium
12-month trend
A real case
A 158-year-old company, gone in three months.
Knights of Old (KNP) was a long-established British logistics firm, trading since 1865 with 700 employees. Attackers got in with a single guessed employee password; ransomware locked the systems and the backups. They had cyber insurance, and still could not bring their systems back.
- 158
- years in business, closed after a single attack
- 3 months
- fighting to recover the systems, without success
- 700
- people lost their jobs
They had insurance; it could not bring back 158 years.
Source: BBC Panorama, 2025
The numbers
Risk usually starts with a person.
Average cost of a breach
$4.99M
The global average cost of a single data breach, up 12% in one year.
Source: IBM Cost of a Data Breach 2026
More often than not, attackers get the key from an employee.
The attacker’s view
Why do they always go after people?
Breaking a system is expensive and hard. Tricking a person is cheap, fast and scalable.
Almost free
Sending an email costs nothing. Thousands go out in one go.
Many attacks at once
No need to target anyone one by one; the same message reaches thousands, and one mistake is enough.
It works
Instead of breaking the most complex system, they pick the weakest link, and it usually pays off.
Misconceptions
Four common misconceptions
These four beliefs leave organisations exposed.
“We are not a target.”
Attackers go for the easiest target. Every small and mid-sized company is a target.
“It is too expensive.”
The average breach costs $4.99M. Prevention is small in comparison.
“Our people already know.”
Knowledge alone is not enough. Realistic practice and regular drills are essential.
“Technology protects us.”
Even the best technology cannot stop human error. People and technology have to work together.
What we do
From awareness to behaviour: programmes, training and briefings.
Start with a single session, or move to a year-round programme we run for you.
Awareness programme
Year-round · You watch, we manage
A fully managed programme that continuously measures and improves how your people behave.
- Realistic simulations
- Exercises that mirror the latest phishing, vishing and smishing techniques.
- Personalised training
- AI-assisted content matched to each person’s role and level.
- Dark web monitoring
- Leaked company emails and passwords are detected and reported.
- Behaviour reporting
- Reports that measure behaviour, with evidence ready for KVKK, GDPR and ISO 27001.
Employee risk tableIllustrative viewEmployee Human risk Status Employee 01a•••••@•••••.com 71% · High Breach detected Employee 02m•••••@•••••.com 58% · Medium Active Employee 03s•••••@•••••.com 46% · Medium In training Employee 04k•••••@•••••.com 33% · Low Active Employee 05e•••••@•••••.com 21% · Low Active Cybersecurity training
Online · Classroom
Hands-on, interactive training designed around what your team needs.
- Core training
- Phishing, password security, social engineering and data protection for every employee.
- Real cases
- Examples from your sector and practical scenarios.
- Role-based content
- Sessions adapted to each department’s and role’s risk.
- Flexible length
- From a one-hour session to a full-day workshop.
Leadership and team sessions
Senior leadership · Critical teams
Live sessions for leadership and critical teams, tailored to your sector and the way you work.
- Current agenda
- Recent attacks and real cases from your sector.
- Attacks aimed at leadership
- CEO fraud, deepfake voice and supply chain risk.
- A decision-maker’s view
- Risk, accountability and priorities.
- Short or in depth
- From a one-hour meeting to a half-day session.
Click rate before training33.1%
After 12 months of regular training4.1%
86% fewer clicks
KnowBe4 Benchmark 2025, 14.5 million users
Employee scorecardIllustrative view
E••• M•••e•••••@•••••.com
- Human risk
- Medium
- Security knowledge
- Beginner
- Engagement
- Medium
- Phishing risk
- Low
- Breach exposure
- High
- Dark web breaches
- 3
Looking for simulations, dark web monitoring or compliance reporting? We run all of it for you, in one place.
Talk to us about a programmeBuild a session
From a one-hour meeting to a full-day workshop.
Who is it for, where, and how long? Choose, and we’ll show you the format that fits.
Who for
Where
How long
Awareness session
The most common attack types, real examples and habits people can apply straight away.
- Live and interactive, wherever your team is.
- Delivered in Turkish or English
Where is your organisation?
Security maturity model
Five stages, based on the SANS Security Awareness Maturity Model. Pick a stage to see how we would move you forward.
Stage 2 / 5
Compliance-focused
Boxes get ticked, behaviour stays the same.
We take you up one step at a time, and stay with you at every stage.
Based on the SANS Security Awareness Maturity Model.
Try it yourself
See where you stand in two minutes.
Test your cyber awareness.
Which of the following describes phishing?
What would a breach cost you?
About us
We treat security as a skill people can learn.
InfoLore was founded to reduce human cyber risk. We bring more than 15 years of IT and telecom experience to the security culture of organisations.
We keep training practical, measurable and positive. The goal is people who know what to do, even after they make a mistake.
- Founded
- 2024
- Team background
- 15+ years in IT and telecom
- Training formats
- Online · Classroom · Workshop
- Training languages
- Turkish · English
- Registration
- ICO · ZC045356
- Follow us
Frameworks
- KVKK
- GDPR
- ISO 27001
- NIS2
Our reports help you document the awareness and training requirements of these frameworks.
The sooner you start, the better.
Programme, training or executive briefing: tell us what you need and we will shape the right format together.
[email protected]