North Yorkshire care provider trains 120 staff on cyber awareness with 94% completion
A North Yorkshire care provider rolled out monthly cyber awareness training to 120 staff across four homes in two weeks, raising completion from 45% under classroom sessions to 94%.
A care provider needed evidence of staff cyber training for its Data Security and Protection Toolkit submission, but its workforce was shift-based, largely non-desk and had no reliable email habit. Classroom sessions had reached under half the staff.
Client: 120-staff residential care provider. Name withheld under our confidentiality terms.
At a glance
- Client
- 120-staff residential care provider
- Sector
- Healthcare
- Location
- Ripon, North Yorkshire
- Size
- 120 employees across 4 homes
- Services
- Cyber Shield, Cyber Awareness Training, Cyber Essentials
- Timeline
- Rolled out in 2 weeks, running monthly
- Headline result
- 94% — Monthly completion across 120 staff
Measured results
- Monthly completion across 120 staff
- 94%Monthly completion across 120 staff
- From sign-off to full rollout
- 2 weeksFrom sign-off to full rollout
- Improvement on previous classroom attendance
- 45% → 94%Improvement on previous classroom attendance
- Individual certificates for toolkit evidence
- 120Individual certificates for toolkit evidence
The challenge
- Shift patterns meant no time when all staff were available for training together.
- Many care staff did not check work email regularly and had no company laptop.
- Data protection toolkit submission required documented, current staff training.
- Previous classroom sessions achieved roughly 45% attendance and produced no per-person record.
What we did
- 1
Deployed Cyber Shield with 5–10 minute mobile-friendly lessons staff could complete on a phone between shifts.
- 2
Auto-enrolled all 120 staff from the HR list, with automated reminders and no manual chasing.
- 3
Set a 70% quiz pass mark with re-takes, so completion means comprehension rather than attendance.
- 4
Grouped reporting by home so each manager could see their own team's status.
- 5
Issued verifiable per-person certificates for the toolkit evidence pack.
- 6
Followed with a Cyber Essentials gap assessment once the human-risk baseline was in place.
The outcome
- Data protection toolkit submission supported with per-person, dated training evidence.
- Managers see completion by home without collecting spreadsheets.
- Training reaches non-desk staff on their own phones, between shifts.
- Cyber Essentials certification followed within the same financial year.
“Getting a hundred and twenty carers into a room was never going to happen. Five minutes on a phone in the staff room actually works.”
The concepts behind this engagement
Plain-English reference pages explaining the certifications, threats and controls involved in this piece of work.
Where this fits in what Complete Cyber Security does
FAQ
Questions about this engagement
The questions businesses in a similar position ask most often before starting.
How do you train shift-based staff who do not use a computer at work?
+
By taking the training to the device they already carry. Cyber Shield lessons are 5–10 minutes, mobile-first, and can be completed on a personal phone without installing anything. Enrolment comes from the HR list rather than requiring each person to register, and reminders go by text or email depending on what the employer holds. The 70% quiz pass mark matters here: it distinguishes people who engaged from people who scrolled. In this rollout that combination moved completion from roughly 45% under classroom sessions to 94% within the first month, with no manual chasing by managers.
Is awareness training enough evidence for a data protection toolkit submission?
+
It covers the staff training requirement, but not the toolkit as a whole. What assessors look for is per-person, dated evidence that training was completed and understood — not a booking sheet or an attendance register. Cyber Shield produces a verifiable certificate for each individual, plus an exportable completion report by team, which is what goes into the evidence pack. The remaining toolkit requirements cover technical controls, policy and incident handling, which is why this provider followed the training rollout with a Cyber Essentials gap assessment in the same year.
What does awareness training cost for 120 staff?
+
Cyber Shield is priced per user per month, from £0.99 for teams, so a 120-person workforce sits at roughly £120 per month at list rate with no setup fee and no minimum term. That covers monthly lessons, quizzes, automated enrolment and reminders, manager dashboards and individual certificates. There is a 14-day free trial with no credit card if you want to test the content against your own staff before committing. Compared with classroom delivery, the saving is less in licence cost than in recovered staff time and the absence of manual attendance tracking.
Related case studies
Manufacturing
Leeds manufacturer passes Cyber Essentials Plus first time to win a supply-chain contract
Read moreProfessional Services
Harrogate accountancy practice cuts phishing click rate from 31% to 4%
Read moreEducation
