Mark Does IT

Service 05 · Richmond, Virginia

Security awareness training your team will actually sit through.

Your people are the perimeter. Train them like it — delivered under HiveMind Security, the cybersecurity education brand founded in 2021.

Start a project See the work

01What's included

Security awareness training, live or on-demand, tailored to how your business actually works. Simulated phishing campaigns with plain-language debriefs, so a click becomes a lesson rather than a reprimand. Email fraud defense — detect, block, respond — for the impostor and invoice-fraud messages small businesses get hit with most. And policy guidance written for people, not auditors.

02Who it's for

Teams without a security person: the office that handles customer data, the shop whose owner is also the IT department, the small firm that just got asked by a bigger customer what its security program looks like. One-time workshop or a standing quarterly program — your call.

03Who's teaching

By day I work in cybersecurity and governance, risk and compliance. I'm a Certified Information Systems Auditor (CISA, exam passed September 2026) and an ISO/IEC 27001 Lead Implementer, and HiveMind Security has been my teaching brand since 2021. The material is practical because the day job is.

What you get

  • Security awareness training, live or on-demand, tailored to your business
  • Simulated phishing campaigns with plain-language debriefs
  • Email fraud defense: detect, block, respond
  • Policy, risk and compliance guidance (ISO 27001, GRC fundamentals)

Proof

Work this service produced.

HiveMind Security — screenshot
Own brand · est. 2021Redesign staged

HiveMind Security

Security, as a swarm — the brand behind the awareness training, and a rebuild that fixed 139 SEO findings.

139 → 0 SEO findings, live site vs. rebuild60 → 7 pages: the bloat gone, every page indexable
 DapKey — screenshot
HiveMind Security projectPrototype

DapKey

A robotic hand that reveals your two-factor code only after your secret handshake.

7,774 B of token firmware, minified10 launch blockers found and tracked in the readiness review

Questions

Straight answers.

Will you shame the employees who click?
Never. Simulated phishing is a teaching tool; debriefs are private and plain-language, and the metric is the team's improvement, not an individual's mistake.
How often should we train?
A kickoff workshop, then short quarterly sessions with phishing simulations in between, is the rhythm that sticks for most small teams. A one-time workshop is also fine as a start.
Do you sell security software?
No. I recommend tools where they're needed — often ones you already pay for — and the training is the product.

Other services: Custom website design · Rapid prototyping for business solutions · Domain management · SEO + AI SEO · SEO + AI SEO · Audit & assessment support · Replit SEO rescue

Have an idea? Let's make it real.

A short call is all it takes to find out what's possible — and how fast.

Start a project Read the FAQ