The Gap Isn't Knowledge. It's Practice.

Awareness training tells people what threats look like. It delivers information, tests recall and records completion. It is valuable. It is also insufficient on its own.

Participants in scenario-based immersive learning are 275% more confident applying what they have learned than those in classroom or e-learning equivalents, and 3.75 times more emotionally connected to the content. (PwC, 2020.)

The measurable difference in phishing susceptibility between employees who completed annual awareness training and those who did not is 1.7%. Knowledge alone does not change behaviour under pressure. (Ho et al., 2025, UC San Diego / University of Chicago, n=19,500.)

Simstac is currently delivering a multi-module augmented reality cybersecurity training programme for a FTSE-listed international industrial group, spanning IT managers across multiple global sites.

A gamified scenario pilot is in final development for an operational technology client. Further engagements are in scoping across financial services, critical infrastructure and professional services.