HUMAN RISK & SECURITY AWARENESS PROGRAMS

Security awareness that goes behavior change.

Most security awareness programs stop at training completion. We help organizations reduce human risk by turning awareness into better judgement, stronger reporting habits, and safer day-to-day decisions.

Outcomes

What you walk away with.

  • A risk-based program your CISO can actually report on
  • Measurable drop in phishing susceptibility quarter over quarter
  • Tailored content and comms that match your culture
  • A repeat-clicker plan that closes the loop on risky behaviour
  • Executive reviews with metrics leaders care about
  • An extension of your team, not another vendor to manage
Our Clients

Trusted by leading public and private sector organizations across North America.

BC Hydro logo
TD Bank logo
CIBC logo
Simon Fraser University logo
BCLC logo
Town of Ajax logo
OceanaGold logo
Seapeak logo
Mark Anthony Group logo
Fortis Alberta logo
Equinox Gold logo
Tolko Industries logo
WestJet logo
BC Hydro logo
TD Bank logo
CIBC logo
Simon Fraser University logo
BCLC logo
Town of Ajax logo
OceanaGold logo
Seapeak logo
Mark Anthony Group logo
Fortis Alberta logo
Equinox Gold logo
Tolko Industries logo
WestJet logo
WHY RISK PERSISTS

Running a real program takes more than buying a platform.

Annual modules and quizzes may satisfy policy requirements, but they rarely change what employees do when a real threat lands in their inbox.

Checkbox compliance

Annual modules and quizzes may satisfy policy requirements, but they rarely change what employees do when a real threat lands in their inbox.

One-size-fits-all training

Finance, operations, and IT don't face the same threats. When everyone gets the same content, it feels irrelevant and gets ignored.

Risk is not being measured

Completion rates hide the real story. Susceptibility, reporter rate, and behaviour change are not being tracked.

Security teams are stretched thin

Awareness is one of ten things on your plate. It rarely gets the time it needs to land.

Choose the model that fits your team

Choose the model that fits your team.

Start with the platform and run it in-house, add onboarding, or hand the whole program to us. Each tier builds on the one before it.

Licensing Only

The platform, full content library, and Living Security support resources to run the program in-house.

  • Training and phishing platform licenses
  • Support Garden how-to resources
  • Online technical support
  • All future content releases

Onboarding

Everything in Licensing, plus hands-on technical setup and a documented roadmap so you launch with confidence.

  • Technical readiness and platform integration
  • Onboarding calls and admin training
  • Strategy and roadmap document
  • Audience, notification, and reporting setup
Most popular

Managed Services

Everything in Onboarding, plus a monthly customer success consultant who runs your program for you.

  • Monthly phishing and training execution
  • Audience management, reminders, reporting
  • Monthly review meetings with metrics
  • Action plans for repeat clickers
Outcomes

Measurable results your CISO and board can see.

We track the indicators that matter, risk behaviors, reporting, repeat offenders, and culture , so you can show progress, not just activity.

85%
Lower phishing click rates
Across managed program cohorts within 12 months.
3.4x
More phishing reports
Stronger reporting habits across the workforce.
62%
Fewer repeat offenders
Targeted reinforcement breaks the repeat cycle.
94%
Training participation
Engaging experiences people actually finish.
  • More resilient day-to-day security behaviors
  • Stronger executive visibility into human risk
  • Defensible reporting for boards, regulators, and auditors
  • Reduced incident volume and response burden
What's Included

An extension of your security, IT, and people teams.

We integrate with your existing stack and stakeholders, not around them. Every engagement is structured around clear outcomes, named owners, and a shared operating cadence.

Discovery and current-state assessment

We start by understanding your risk, your audiences, and what is already working and where you teams need help.

Risk-based program design and roadmap

A program built around the behaviours that actually move risk, with a clear quarterly plan.

Tailored content, comms, and simulations

Phishing templates, training tracks, and internal comms shaped to your culture and your industry.

Managed delivery as an extension of your team

We run campaigns, manage audiences, handle reminders, and keep the program moving every month.

Quarterly executive reviews and reporting

Clear metrics, behaviour signals, and a risk story leadership can act on, not a completion dashboard.

Continuous refinement based on behaviour data

What works gets scaled. What does not gets retired. The program improves quarter over quarter.

Featured experience

CyberEscape Online, the team-based cyber escape room.

A virtual, plot-driven escape room where teams solve puzzles and make decisions under pressure, driving measurable behavior change in a single 75 minute session.

What Clients Say

Trusted by security teams driving real behaviour change.

"Change Champions have a wealth of experience in cyber security awareness along with a creative flare that assisted our team in enhancing our program across a variety of channels. The team is customer focused and a pleasure to work with."
Dan Neal
Manager, Information Security & Compliance, WestJet
"They are true professionals that make my job easier and our company more cyber-aware."
Kilian Stumpe
Manager, Information Security & Compliance, Interfor
"Our Cyber Security Awareness Program greatly benefited from the structured approach and creativity that Change Champions brought to the table."
Michael Prokop
Cyber Security Program Manager, QuadReal Property Group
"Change Champions have a wealth of experience in cyber security awareness along with a creative flare that assisted our team in enhancing our program across a variety of channels. The team is customer focused and a pleasure to work with."
Dan Neal
Manager, Information Security & Compliance, WestJet
"They are true professionals that make my job easier and our company more cyber-aware."
Kilian Stumpe
Manager, Information Security & Compliance, Interfor
"Our Cyber Security Awareness Program greatly benefited from the structured approach and creativity that Change Champions brought to the table."
Michael Prokop
Cyber Security Program Manager, QuadReal Property Group

Want security awareness that does more than check a box?

Tell us where you are and where you want to go. We will sketch the model that fits your team and your risk.