Every October, security leaders are expected to deliver something meaningful. Most don’t have time to build it. The result is familiar: a generic phishing test, a video no one watches twice, and a recap that can’t answer the one question leadership always asks — did anything actually change? This year, you won’t be starting from scratch in September.
The SoSafe ECSM Kit is a full month’s campaign – already built, ready to run, with barely any lift on your side.
Not a content pack to customise. Not another set of slides to adapt. A structured four-week experience where employees don’t just read modern attacks, they practise responding to them.
Phishing game. Simulated scam call. Multi-channel attack scenario. A board-ready recap that shows real participation and behaviour change, not just who clicked through.
Built to be done. Not watched.
Four weeks. One behaviour change.
Plus: ready-to-send comms pack, branded assets, podcast series on this year’s real attacks · board-ready recap
CISOs, If you’re making the call: The kit closes the gap between “we ran something for October” and “here’s proof our people are better prepared.” The board-ready recap gives you real participation data and behaviour signals, not a completion report.
Practitioners, If you’re running it: You don’t need to build, brief, or chase. The campaign is scheduled, the content is ready, and the month runs without your team becoming its full-time administrators.
Get early access to the ECSM 2026 Kit Now.
Early-access sign-ups get it first, with everything ready to run from day one.
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
