Why technology alone is not enough
MFA, backups and patching protect systems. Attackers also target people: phishing mail, fake CEO requests, or a “helpdesk” asking for a code. Without recognition, someone in a small team is more likely to click or share.
Security awareness is the human layer beside those controls: short practical coaching so staff spot suspicious signals sooner and know where to report them. Floor ICT Academy offers this as invite-only training with a quiz and certificate you can show internally — not open enrollment.
What you set up in practice
Typical SMB steps:
- short, repeatable training on phishing and social engineering — not a one-off flyer;
- a clear reporting path (for example via your MSP ticket portal or internal IT);
- technical basics alongside training: MFA, managed backups and patching;
- invites only for your own staff; no open enrollment links.
More depth
Phishing versus social engineering
Phishing is often a mail or message with a link or attachment. Social engineering is broader: phone pressure, spoofed WhatsApp from a colleague, or someone posing as a supplier. Training practices recognising both patterns — without scare tactics.
Training next to MFA, backups and MSP
MFA limits damage if a password leaks. Backups help recover after ransomware or mistakes. An MSP keeps patching and monitoring steady. Awareness lowers the chance someone hands over access or data themselves. Together they are hygiene; none is a guarantee.
What Floor ICT Academy does
Floor ICT Academy security awareness is practical, invite-only training with a quiz and certificate. You invite your team; there is no open signup link in this article. Academy is not legal or compliance advice — practical IT hygiene for Dutch SMBs.
Questions
Frequently asked questions
Does security awareness replace MFA or backups?
No. Training helps people recognise risk; MFA, backups and patching remain baseline technical controls. You need both layers.
Is this mandatory for every SMB?
There is no general Dutch law that forces every SMB to take a specific awareness course. Customers or insurers may still ask for it. This is not legal advice.
How does Floor ICT Academy fit in?
Academy security awareness is invite-only: practical modules with a quiz and certificate. You or Floor ICT invite staff; there is no open enrollment from this page.