Your October campaign, already built.

Every October, security leaders are expected to deliver something meaningful.
Most don’t have time to build it.
The result is familiar: a generic phishing test, a video no one watches twice, and a recap that can’t answer the one question leadership always asks — did anything actually change?
This year, you won’t be starting from scratch in September.

The SoSafe ECSM Kit is a full month’s campaign – already built, ready to run, with barely any lift on your side.

Not a content pack to customise. Not another set of slides to adapt. A structured four-week experience where employees don’t just read about modern attacks, they practise responding to them.

Phishing game. Simulated scam call. Multi-channel attack scenario. A board-ready recap that shows real participation and behaviour change, not just who clicked through.

Built to be done. Not watched.

WHAT’S INSIDE:

Four weeks. One behaviour change.

• Week 1: AI-generated deception
  Employees play a phishing game built around today’s attacks — no obvious typos, no easy tells.
• Week 2: Synthetic voice & video
  A simulated scam call. Because hearing isn’t believing anymore.
• Week 3: Attacks beyond the inbox
  Email, Teams, QR code, fake login. The scenario plays out across the channels employees actually use.
• Week 4: The combined challenge
  Everything at once. One behaviour measured: pause, verify, report.

Plus: ready-to-send comms pack, branded assets, podcast series on this year’s real attacks · board-ready recap

CISOs, If you’re making the call:
The kit closes the gap between “we ran something for October” and “here’s proof our people are better prepared.” The board-ready recap gives you real participation data and behaviour signals, not a completion report.

Practitioners, If you’re running it:
You don’t need to build, brief, or chase. The campaign is scheduled, the content is ready, and the month runs without your team becoming its full-time administrators.

Get early access to the ECSM 2026 Kit Now.

Early-access sign-ups get it first, with everything ready to run from day one.