International standardInternational
ISO/IEC 270012022 edition
Clause 7.3 · Control A.6.3Information security awareness, education and training for all staff.
Train your staff in cybersecurity and have the proof ready when the auditor arrives
We send your staff simulated phishing emails. You see who clicked and assign them a refresher course. The platform records what each person has completed and when, and when your ISO 27001 or ENS auditor asks for it, you export it as a PDF.
The training you’re asked for, with its exact reference
Every completed course is recorded as evidence for these frameworks.
Spanish National Security FrameworkSpain
ENSRoyal Decree 311/2022
Measures mp.per.3 · mp.per.4Regular awareness, including social engineering, and staff training with an assessment of its effectiveness.
European regulationEuropean Union
GDPRRegulation (EU) 2016/679
Article 39(1)(b)Awareness-raising and training of staff involved in processing operations.
Depending on your sector
European directiveEssential and important entities
NIS2Directive (EU) 2022/2555
Art. 20(2) · Art. 21(2)(g)Training for management bodies, and cybersecurity training and cyber hygiene for staff.In Spain, the transposing law is still going through parliament.
European regulationFinancial sector
DORARegulation (EU) 2022/2554
Article 13(6)ICT security awareness programmes and digital operational resilience training for all staff and senior management.Applicable since 17 January 2025.
How we protect the platformCogniria supports compliance and provides the evidence; it does not certify your organisation.
How many of your staff would click today?
It’s the first thing we measure. We run a simulated phishing campaign across your whole staff and you see, person by person, who clicked and who went as far as typing their password.
With that starting point you assign training and measure again. At this demo company, people who had been trained fell for it 3% of the time; those who hadn’t, 25%.
“Parcel held at customs” campaignYour staff, person by person
- 13 entered their password
- 18 clicked the link
- 58 didn’t fall for it
25%fell for it without training
3%fell for it after training
What we find when we arrive at a company
Training exists, but it’s scattered
Loose content, spreadsheets and emails. Nobody knows who has finished it.
Nobody has measured the risk
No one knows how many people would fall for a well-crafted phishing email today.
The audit arrives with no evidence
Someone has to piece together by hand who was trained, on which course and when.
One course a year doesn’t change habits
Without measuring and reinforcing again, what people learned fades before the next campaign.
Training and phishing simulations, connected
Your staff train on the platform and we run the phishing campaigns. Each campaign’s results reach the platform, where you see who needs a refresher and assign it.
Training platform
Courses with audio, gamified challenges and learning paths tailored to your team, with progress tracking, leaderboards and completion certificates.
- Courses with slides, audio and quizzes
- Gamification with points, badges and leaderboards
- Learning paths by level and topic
- Regulatory compliance reports
- Downloadable certificates with your brand
- Platform in Spanish, English and French (more languages configurable)
Phishing simulator
Real, controlled email phishing campaigns to measure your team’s awareness. Spot the risk before attackers do.
- Realistic email templates
- Campaigns by employee segment
- Real-time metrics
- Instant training on a click
- Reports for leadership and the CISO
This is what you show the auditor
A report per person and per mandatory course, with the date and the score. It fills itself in as your staff train; all you do is export it.
Compliance reportMandatory training per person · updated today
PDFCSVExcel
Person DepartmentMandatory courseStatus Completed Score
A. SantosFinancePhishing & social engineeringUp to date12/09/20269/10
M. TorresSalesStrong passwordsUp to date03/09/20268/10
J. NadalOperationsGDPR & data protectionPending——
E. RuizHuman resourcesBackups & recoveryOverdue——
L. PrietoManagementPhishing & social engineeringUp to date28/08/202610/10
C. MolinaCustomer serviceStrong passwordsUp to date22/08/20267/10
- Every person, with every course they need. Mandatory courses are assigned to the whole company or to the people you choose.
- Date and quiz score. A course counts as completed once its final quiz is passed.
- Pending and overdue, in plain sight. You know who to remind before the auditor sees it.
- Into the audit file in one click. As PDF, CSV or Excel, ready to attach.
Cogniria provides the training evidence for ISO 27001, ENS and GDPR. Certification is issued by your auditor, not by us.
See the report in a demoFrom the first campaign to the auditor’s report
Each campaign shows you where your staff stand, training fixes what isn’t working and the report documents it. Then you measure again.
Measure
Phishing simulations reveal how many people would click today: your real risk baseline.
Train
The catalogue of courses with audio, challenges and gamification reduces that risk with training that gets finished.
Prove
Auditable, exportable, person-by-person compliance turns training into evidence (ISO/ENS).
Manage continuously
Recertification, reminders and tracking keep evidence alive and the programme running.
How you get started
We set up your company with your brand
We configure your space with your logo and colours.
You onboard your staff
Add your employees via bulk import or invitation, organised by department.
You publish and assign the mandatory courses
You mark the mandatory courses and their deadlines, and we launch the phishing simulations.
You monitor and prove
Track progress from the dashboard and export the compliance evidence whenever you need it.
Choose by what you need to prove
Starter to start training, Professional when you need the report for the auditor, and Enterprise for large organisations. Custom pricing by volume.
Starter
Train and raise awareness
To start training and raising awareness with the catalogue, gamification and certificates.
- Full catalogue of 60+ courses with audio
- Gamification, challenges and paths
- Mandatory courses, deadlines and reminders
- Dashboard and statistics
- Certificates and your logo
Pricing by volume
Recommended
Professional
Plus, prove your compliance
The key jump: “I need the report for the auditor (ISO/ENS).”
- Everything in Starter
- Auditable person × course compliance
- PDF / CSV export of the evidence
- “Needs attention” band and recertification
- Brand colour in the interface + custom content
Pricing by volume
Enterprise
Adapts to your organisation
When you need “SSO, integrations, white-label or unlimited licenses.”
- Everything in Professional
- Corporate SSO (coming soon)
- White-label on your own domain (coming soon)
- Integrations / API (coming soon)
- Unlimited licenses and priority support
Pricing by volume
Ask us for the 14-day trial: we set up your company’s workspace with everything in the Professional plan. Request the trial
Book a demo
A 20–30 minute session. We’ll get back to you within 24 business hours.
In the demo you’ll see…
- The compliance report, live
- The course catalogue with audio
- A managed phishing campaign
- How the evidence is exported
[email protected]