Behaviour-Led Security Awareness Training and Phishing Simulation for Organisations

Founded in 2007 by Melanie Oldham OBE, Bob's Business is a UK provider of cybersecurity awareness and compliance training aimed at the human side of organisational risk. The company sells to employers rather than individuals, with a customer base spanning central government, local councils, healthcare, housing associations, education, legal services and managed service providers. Its stated goal is cultural change, moving staff from passive policy recipients to people who recognise and report threats, rather than one-off annual completion.

Delivery runs through CyberLearn, the company's cloud-hosted learning management system, which carries 60-plus on-demand courses built as short animated stories rather than lecture-style modules. Administrators enrol staff, segment them into smart user groups with tailored learning paths, upload their own policies and SCORM-compliant content, and brand the environment. Phishing simulations send industry-specific, psychologically informed lures on an automated schedule; anyone who clicks lands in a Think Before You Click remediation module, and results roll up against a phishing baseline.

The differentiator is content design: behavioural-science-informed storytelling with recurring animated characters, reinforcement packs for between-course nudges, and reporting that tracks risk reduction rather than course completion alone. Alongside cyber awareness, the catalogue covers GDPR, ISO 27001, ISO 14001 and PCI-DSS compliance, letting a single platform serve both audit evidence and culture goals. The company holds ISO 27001 and ISO 9001 certification, and publishes customer stories from HM Government, The Law Society, the Scout Association and several UK local authorities.