We use cookies to give you a more relevant browsing experience and improve our website. Using this site means that you agree with our Use of Cookies Policy.


What we do

Stickley on Security was founded in 2007 with a plan to provide organizations with meaningful education and awareness solutions that employees and customers would actually embrace. As our founder Jim Stickley points out, it is simple to offer a training course but far more difficult to actually educate the participants. Our goal is to ensure that your customers and employees not only learn about cybersecurity risks, but that they can apply what they learn into their everyday lives and jobs.

SoS Solutions

Explore our solutions designed to exceed your cybersecurity education & awareness requirements.

Powered Cybersecurity Training

Powered Cybersecurity Training. (PCT) is designed to help solve the challenges small and medium-sized businesses face in attempting to deploy and manage cybersecurity education and phishing simulation.


FIND OUT MORE
SoS Advisor

SoS Advisor was designed to address the customer security education and awareness needs of your organization. We understand that the security threats your customers face change daily. That's why SoS provides new content everyday specifically written for your customers.


FIND OUT MORE
Domain Assure

Spoofed domains lead to employee and customer compromise. Domain Assure Detect and Domain Assure Prevent are two solutions designed to maintain your organizations online integrity and reduce spear-phishing, typosquatting and other online attacks.


FIND OUT MORE
BadPhish

Some of the biggest cyber security breaches in US history have started with a malicious email received by an unsuspecting employee. Using his past 25 years of experience breaking into organizations, Stickley has created BadPhish, the definitive next generation phishing simulator and education solution.


FIND OUT MORE
Employee EDU

Potential new threats against your organization emerge daily. Employee EDU is designed to ensure your staff is prepared. Through our security education and awareness solutions your staff will not only be trained about important security topics but also be made aware and tested on the latest security threats.


Find Out More
SoS WorkRemote

Stickley on Security WorkRemote combines practical education and technology to provide a next-generation remote employee cybersecurity solution. Stickley on Security WorkRemote ensures no corporate data resides at the remote location, no corporate data transported, no individual VPN required, and only encrypted pixels are transmitted.


FIND OUT MORE
Board Meeting Cybersecurity Updates

Jim Stickley speaks at hundreds of board meetings nationwide on cybersecurity related topics and can now speak to your board as well. When Stickley speaks to your board, his goal is to keep them aware of the many cybersecurity threats that your organization faces as well as keep them up to date on the latest cybersecurity regulations. Ultimately Stickley gives your board members the critical information they need to make cybersecurity related decisions.


FIND OUT MORE
Executive / Board Consulting

Business executives and their board members face a never-ending challenge of keeping up with the latest cybersecurity security threats. With all of the audits and reports, security budget requests and regulatory requirements, our cyber security experts can help you make sense of it all.


FIND OUT MORE

Latest Cybersecurity News

Finding Payment Card Fraud and What to Do About It

We all dread the thought of finding payment card charges we don’t recognize. We have to wonder if someone, somewhere breached our account and went on a shopping spree. If you’d like to know what to do about a suspected fraudulent charge and how to go about filing a credit fraud claim, this is for you. First, it’s important to remember we’re human, and we might forget making a payment card purchase. However, the world of payment card fraud today is full of cybercriminals, hackers, skimmers, and shimmers—and they’re all trying to help themselves to our hard-earned credit.

There is an Uptick in Fake Emergency Data Requests

Late last year, the FBI issued a Private Industry Notification (PIN) alerting U.S.-based companies and law enforcement agencies about the rise in fraudulent Emergency Data Requests (EDRs) used by cybercriminals. While not a new tactic, cybercriminals have started using them again. EDRs are urgent requests for sensitive user data, typically reserved for life-threatening situations, bypassing the standard warrant process. Hackers exploit this by posing as legitimate law enforcement officers and tricking companies into releasing private user data.

Old School Phishing Attacks in Your USPS Mailbox

It’s not what you’d expect with the usual phishing attacks, but it seems that’s the point. A new flurry of phishing is sending written letters to prospective victims. The letter in your mailbox appears to be from your financial institution, and that leads to trusting what it says. Using the mail is an old school tactic from scammers and it only takes one victim to bite the hook. This scam likely works because these days we expect to get phished via email, text, or phone. But the regular mail? Nonsense!

loo

Have questions? Call us anytime!