Infosec IQ

Turn your workforce into a strong first line of cyber defence. Infosec IQ delivers engaging, role-based security awareness training and phishing simulations that reduce human risk and build a culture of vigilance. With tailored content and powerful a

Talk to an expert

Role-Based Training

Microlearning that resonates

Infosec IQ provides tailored training content across industries, roles, and regulations including ISO 27001, NIST, and Essential Eight.

Training delivered as short videos, games, or interactive modules
Libraries mapped to compliance standards
Ideal for HR, IT, legal, and leadership roles

Simulated Phishing

Realistic testing without blame

Conduct automated phishing simulations and measure user behaviour in a safe environment. Results are used to strengthen weak points with contextual training.

Schedule or randomise campaigns with adjustable difficulty
Real-time dashboards to identify high-risk users
Customisable scenarios that reflect evolving threats

Enterprise Integration

Scalable and seamless deployment

With support for SSO, SCIM, and LMS platforms, Infosec IQ fits into your existing infrastructure with minimal effort and maximum effectiveness.

Compatible with Okta, Azure AD, and major LMS tools
Automated provisioning and reporting
Enables centralised management across departments

Benefits

How we differentiate from others

Implementing Infosec IQ is just the beginning — ensuring it delivers measurable impact is where we come in. At Bastion Security Group, we don’t just roll out training; we partner with you to drive long-term behavioural change. From custom deployment and phishing simulations to ongoing optimisation a

Tailored Implementation

We work closely with your internal teams to align content, scheduling, and delivery to your internal risk, compliance, and communication goals.

Program Monitoring and Support

Our experts help optimise simulations and training cadence over time, supported by data-driven insights and user behaviour trends.

Trusted Partner in Awareness

As a managed service provider, we offer more than licences — we provide guidance, configuration, and ongoing coaching tailored to your organisation

Service detail

Employee Protect Managed Services

Bastion Security Group brings the award-winning InfosecIQ training platform to Australian businesses, offering over 2,000 training assets and phishing simulations tailored for every employee — from front-line staff to senior executives.

InfosecIQ Training Platform Managed by Bastion Security Group

Security awareness tailored to your people and your risk

Delivered as a fully managed service or operated by your internal HR/IT team, our InfosecIQ offering includes custom training paths, automated campaigns, and advanced phishing simulations.

Over 2,000 training modules, posters, and infographics
Phishing simulators with 1,000+ realistic email templates and spoofing scenarios
Role-based learning plans, assessment reports, and platform automation

‍

Service detail

More About InfosecIQ

Designed for real-world threats, InfosecIQ helps you reduce risk at scale by embedding security knowledge directly into your workplace culture.

Smart Training, Real Results

Built for behaviour change, not just compliance

InfosecIQ combines engaging microlearning content with risk-based phishing campaigns and real-time reporting, making it easier to train, measure, and adapt your security awareness strategy

Fully customisable training by role, industry, or compliance framework
Integration with HR and IT systems for easy rollout and management
Dynamic reporting and analytics to track employee progress and reduce risk exposure

‍

Cyber security news

Latest advisories

Stay ahead of emerging threats with our expert blog posts, research, and industry updates.

Silverstripe - Cross-Site Scripting (XSS) Vulnerability

A Cross-Site Scripting (XSS) vulnerability has been identified in the administrator panel of Silverstripe CMS, specifically in the handling of the user input within the form messages module.

Silverstripe - Host Header Injection

A Host header injection vulnerability in Silverstripe has been identified that allows an attacker to poison the password rese

Statamic CMS

Sam Schroder found a local file inclusion (write only) vulnerability inside of the upload functionality of Statamic CMS. This affects front end components like forms with `assets` fields.

Frequently Asked Questions

Frequently asked questions

From risk assessment to rapid response - we’re with you every step of the way.

What is Infosec IQ and how does it improve cyber awareness?

Infosec IQ is a security awareness training platform that delivers engaging, role-based content and simulated phishing exercises. It helps reduce risky behaviour and builds a stronger human firewall by making users more vigilant to cyber threats.

How does simulated phishing work in Infosec IQ?

Infosec IQ lets you run phishing simulations in a safe environment. You can customise campaigns, adjust difficulty, and track results with real-time dashboards. High-risk users are identified and automatically guided into targeted training.

Is Infosec IQ aligned with security standards?

Yes. Infosec IQ offers training aligned with ISO 27001, NIST, and the Australian Essential Eight. The content library includes materials tailored for different roles, including IT, legal, and executive audiences, all mapped to compliance needs.

How is Infosec IQ deployed across an organisation?

Infosec IQ integrates with major platforms like Okta, Azure AD, and LMS tools. It supports SCIM, SSO, and automated provisioning, making it easy to scale across departments and manage users through centralised reporting and dashboards.

Why choose Bastion to implement Infosec IQ?

We don’t just roll out training. Bastion partners with your internal teams to drive lasting behaviour change through ongoing optimisation, deployment support, and measurable results. Our approach ensures your awareness program meets real risk and compliance objectives.