CYBERSECURITY TRAINING & PHISHING
Enhance your digital safety skills with essential cybersecurity training concepts and practical tips for a secure online experience.
Table of Contents
Cybersecurity Training & Phishing Simulations
VeritGuard Knowledge Base | Training & Awareness
As part of your VeritGuard Pro or Elite plan, all users at your firm receive ongoing cybersecurity awareness training and periodic phishing simulations. This article explains what to expect, how the training works, and what happens if you click a simulated phishing email.
Why Your Firm Receives This Training
The majority of security breaches are caused by human error -- an employee clicking a malicious link, entering credentials on a fake login page, or opening an infected attachment. Both the IRS (Publication 4557) and the FTC Safeguards Rule require ongoing, documented security training for all staff at firms that handle taxpayer data.
This training is not optional -- it is part of your firm's compliance posture. Completing it on time helps satisfy federal requirements and protects your firm from real-world attacks.
Training Schedule
| Type | When | What to Expect |
|---|---|---|
| Training Modules | June and November each year | Short video courses on common cyber threats (phishing, ransomware, social engineering, safe browsing). Takes approximately 15-30 minutes to complete. |
| Phishing Simulations | June and December each year | Realistic but safe "test" phishing emails sent to your inbox. Designed to measure awareness after the training. |
| Initial Onboarding Training | Shortly after your first onboarding | New clients and users receive their first training regardless of the annual schedule. |
How to Complete Your Training
- You will receive an email from trainings@verito.com with the subject "Security Training and Awareness."
- The email will list the training courses assigned to you, along with an expiration date for each.
- Click the "Training Portal" link at the bottom of the email to access the courses.
- Complete each course and the assessment that follows. Most courses are short video modules that take 5-10 minutes each.
- Complete all assigned courses before the expiration date.
Why Am I Receiving Simulated Phishing Emails?
Periodically, you will receive safe "test" phishing emails from Verito. These look like real phishing attempts -- they may impersonate a bank, a shipping company, a tax authority, or even an internal request. They are designed to test whether the training is working.
These simulations are a normal part of your VeritGuard service. They are not targeted at specific individuals, and there is no penalty for clicking one.
I Clicked a Simulated Phishing Link -- What Happens Now?
- Don't worry. The link is completely safe. No malware was downloaded and no data was compromised.
- You will typically see a landing page that explains the email was a simulated phishing test and provides tips on what to look for next time.
- There is no punishment. The purpose is education, not discipline. Clicking a test link is a learning opportunity.
- If you receive additional training materials after clicking, please complete them -- they are tailored to the type of phishing attempt you fell for.
If you are unsure whether a suspicious email is a real threat or a Verito simulation, treat it as real. Do not click links, and report it using the "Report This Email" button in your email security banner or forward it to itsupport@verito.com. It is always better to report a simulation than to ignore a real attack.