Boxphish Data Security Awareness Training is a platform designed to reduce organisational exposure to data breaches and cyber attacks by educating employees on security threats. The platform combines structured training modules with phishing simulation campaigns to build and reinforce a security-aware culture. Training content covers a range of phishing attack types, including email phishing, spear phishing, smishing, vishing, and whaling. Modules are described as short, interactive, and scenario-based, with gamification elements to improve knowledge retention. Content can be customised to address industry- or organisation-specific threats. The platform follows a four-stage methodology: - Assess: Identifying organisational vulnerabilities and training needs - Educate: Delivering interactive training modules across a range of cybersecurity topics - Reinforce: Running phishing simulation campaigns and periodic reminders - Measure: Tracking employee progress and training effectiveness via a reporting dashboard Administrators can access analytics and reporting tools to monitor completion rates, identify at-risk users, and demonstrate compliance with regulatory requirements or cyber insurance policies. The platform is described as low-administration, suitable for small security teams, and accessible on any device.