All seven modules
Module 07 · Nerv-TRAIN · The human layer
AI Security Awareness Training
Annual phishing training does not teach anyone what to do with a chatbot.
Nerv-TRAIN is short, role-based AI security education delivered in the flow of work, and assigned by what the platform actually observes. When Nerv-WEB redacts a client name out of a prompt, the person who typed it receives the two minute module on that exact behaviour, the same day.
What it covers
- Role-based paths: staff, finance, exec, developer
- Deepfake voice and video approval simulations
- Safe AI use on client and regulated work
- AI-written BEC and payment fraud simulations
- Shadow AI: what is approved and what is not
- Malicious assistant, plugin and agent lures
- Prompt hygiene and what never goes in a prompt
- Policy attestation and acknowledgement tracking
- Behaviour-triggered micro-modules
- Completion evidence for ISO 27001 and SOC 2
Where it separates
- 01Triggered by behaviour, not by calendar.
- Training assigned the day the risky thing happens, to the person who did it, about the thing they did. Retention is a different order of magnitude.
- 02The loop closes inside one platform.
- Nerv-WEB detects the exposure, Nerv-TRAIN corrects the behaviour, the console evidences both. No CSV export between three vendors.
- 03AI-era social engineering, not 2019 phishing.
- Deepfake approval requests, AI-written invoice fraud and malicious agent lures, because that is what is actually arriving now.
- 04Evidence an auditor accepts.
- Completion, attestation and behavioural improvement over time, mapped to ISO 27001 A.6.3 and SOC 2 requirements.
Content is written and maintained by the Stealth Cyber team, in Australian English, with Australian regulatory and privacy context.