Teach your team to take a second look.
Most attacks count on someone moving too fast. Our short, practical courses build the habit of pausing to check, across phishing, insider threats, everyday security, and the training your contracts require.
FromNorthfield Payroll <payroll@northfie1d-pay.co>
SubjectACTION REQUIRED: Paycheck on hold
Hi team member,
Your direct deposit could not be processed.
Verify your account within 2 hours or this pay period will be delayed.
Verify account
Northfield Payroll Services
- The sender’s domain is misspelled: a 1 in place of an l.
- Alarming subject meant to make you act first and think later.
- An artificial deadline to rush you.
- A login button instead of going to the payroll site you already use.
Six training tracks
Assign one, a few, or all of them. Each track is written in plain language and built around situations your people actually run into.
Core Security Awareness
For everyone in the organization
The yearly training most frameworks, customers, and insurers expect: passwords and MFA, safe email and web habits, protecting sensitive and contract information, acceptable use of company technology, and working securely from home and on the road.
Includes: Annual Security Awareness & Insider Threat (45 min) · Acceptable Use (20 min) · Remote Work & Mobile Devices (25 min)
Phishing and Social Engineering
For anyone with an inbox
How to tell what is wrong with a suspicious email: look-alike domains, deceptive links, dangerous attachments, pressure tactics, and pretexting, plus how to verify a request and report fast.
Includes: Email Threat Spotting (40 min), with six annotated sample messages and a scenario exam
New Employee Security Onboarding
For new hires, before they get access
Day-one security for new team members: their responsibilities, the kinds of information they will handle, setting up their account and MFA, spotting phishing, and how to report an incident.
Includes: New Hire Security Onboarding (45 min)
Insider Threat Awareness
For all staff, with guidance for managers
Recognizing the warning signs of insider risk, from careless mistakes to deliberate misuse, how data gets taken, how to report a concern the right way, and what managers should do when they notice something.
Includes: Insider Threat Awareness (20 min)
Privileged User and Administrator Security
For IT staff and anyone with admin access
Role-based training for the accounts attackers want most: least privilege, separate admin accounts, MFA, logging, just-in-time access, change management, and responding to an admin account compromise.
Includes: Privileged User & Administrator Security (25 min)
Cleared Contractor Security Briefings
For cleared defense contractors and their FSOs
Briefing content for cleared employees under 32 CFR Part 117 (NISPOM): the initial security briefing, the annual refresher, insider threat awareness, and foreign travel. Your Facility Security Officer still owns your security program, reporting, and records.
Includes: Initial Security Briefing (25 min) · Annual Refresher (20 min) · Insider Threat (20 min) · Foreign Travel (20 min)
Built for the people who have to prove it was done
Whoever runs security, HR, or compliance gets a simple way to assign training, see who has finished, and keep the records auditors, insurers, and customers ask for.
Assign by role
Everyone gets core awareness. IT admins add privileged-user training. Cleared staff get their required briefings.
See completion at a glance
Know who has finished, who is in progress, and who has not started.
Keep the evidence
Download completion records for security questionnaires, cyber insurance applications, and assessments.
Repeat every year
Annual refreshers keep training current without starting from scratch.
How it works
Choose your tracks
Tell us your team size and what you need to cover.
Invite your team
Everyone gets their own login.
People train at their pace
Short lessons fit between meetings and on a phone.
Download your records
Completion records are ready when you need them.
Questions
Who is SecondLook Academy for?
Small and mid-sized organizations that need their people trained on security, including government contractors and cleared defense contractors.
How long does the annual training take?
Most modules take 20 to 45 minutes. The core annual track is about an hour and a half in total.
Can we get proof that our staff completed training?
Yes. Organizations can see who has completed each track and download completion records to keep for audits, insurers, and customer questionnaires.
Does this make us compliant with CMMC or NISPOM?
Training is one requirement among many. Our modules support the awareness and briefing requirements in those frameworks, but completing them does not by itself make an organization compliant.
Do the cleared contractor briefings replace our FSO?
No. They deliver the briefing content and keep completion records. Your Facility Security Officer still runs your security program, handles reporting, and decides what your people need.
Can we choose which tracks our team takes?
Yes. Pick the tracks that fit each group, for example core awareness for everyone, administrator training for IT, and the cleared briefings only for cleared staff.
Request a demo
Tell us about your organization and the training you need. We will reply with options and pricing.
Already enrolled? Log in to your training.