From the first conversation to an ongoing rhythm
How the CyberNest Hub Program Works
CyberNest Hub begins with a structured 90-day Human-Risk Baseline and can continue as an ongoing Managed Awareness program. The process is designed to keep the work manageable for your firm while ensuring training, simulations, and reporting happen consistently.
A clear client journey
Know what happens next.
CyberNest Hub manages the program rather than handing your team a software login and a list of tasks. Your firm stays involved in the decisions that require its authority and context.
Written scope, authorization, agreed payment conditions, roster checks, and technical readiness come before program activation. Each simulation has its own approval.
See the managed serviceReadiness review
A short conversation about your current approach, employee count, email environment, business calendar, and the employee-facing risks most relevant to your firm.
Program scope and approval
CyberNest Hub works with your firm to document participants, exclusions, approved themes, blackout dates, key contacts, stop contacts, and reporting preferences.
Setup and baseline training
Your firm provides the employee roster through an agreed secure method and coordinates allowlisting if needed. CyberNest Hub sets up the program and employees receive short baseline training.
First simulation
CyberNest Hub runs an approved, recognizable phishing scenario and confirms delivery while monitoring the launch.
Follow-up and leadership update
Employees who need additional reinforcement receive targeted learning. Leadership receives an aggregate monthly summary and practical focus areas.
Two additional practice cycles
Two additional approved simulations reinforce learning over the initial 90-day period. CyberNest Hub accounts for business deadlines, exclusions, and firm-approved guardrails.
Plan the next phase
At the end of the baseline, CyberNest Hub reviews what the program showed and recommends practical next steps. Your firm can choose Managed Awareness so training, practice, and leadership visibility remain active rather than returning to a once-a-year routine. Continuing is optional, with no long-term commitment.
Responsibilities at a glance
We manage the work. You keep the right decisions.
CyberNest Hub handles
- Program configuration
- Campaign coordination
- Training assignment and reminders
- Simulation administration
- Targeted follow-up workflow
- Reporting and interpretation
- Program documentation
- Ongoing coordination when Managed Awareness is selected
Your firm handles
- Naming contacts and approvers
- Providing roster and exclusion updates
- Coordinating allowlisting when needed
- Approving each simulation
- Sharing major deadlines and blackout dates
- Reviewing leadership updates
- Choosing whether to continue after the baseline
A responsible pace
A delayed send is better than a skipped check.
CyberNest Hub confirms the required controls before activation. Incomplete authorization, an unverified exclusion, or a missing campaign approval means the send waits.
Authorized contacts can stop pending sends at any time; already-delivered messages cannot be recalled. If a real incident needs attention, simulations pause and your firm's IT or incident-response provider takes the lead.
Start with your firm's current approach.
Step one is a 20-minute conversation. Bring what you do today, even if the answer is nothing, and leave knowing whether this program fits your firm.
Book a 20-Minute Readiness Review