# Woodruff Training > Cyber and AI awareness training, business continuity plans and tabletop disaster exercises for small businesses. Onsite in West Sussex, live online UK-wide. Woodruff Training is a small business run based in West Sussex and working across the South Coast of England and remotely UK-wide. It teaches non-technical staff to recognise cyber attacks and to use AI tools without putting company or customer data at risk, and it carries out the practical resilience and security work that goes with that: business continuity planning, tabletop disaster exercises, multi-factor authentication and password manager rollouts, Cyber Essentials readiness, and domain and email exposure checks. Training is delivered onsite, live online, or self-paced through an online learning portal. Every course has a matching portal module, and every course issues a certificate of completion to each attendee automatically. The courses are: - Cyber Security Awareness (Onsite or live online, 90 minutes, for All staff) - Using AI Safely at Work (Onsite or live online, 60 to 90 minutes, for All staff and managers) - Phishing & Social Engineering (Onsite or live online, 60 minutes, for All staff) - Managers & Owners: Building a Security Culture (Onsite or live online, 60 minutes, for Owners and managers) - AI Adoption for Decision Makers (Online, self-paced, Short modules, for Owners, managers & decision makers) Pricing starts with the learning portal, charged per person per year, with packages that add live training sessions on top. Individual pieces of work are priced separately. All published prices are indicative and exclude VAT. Courses can be tailored after a short audit, so the examples match the systems a team actually uses and the environment they work in. Article links below point at the Markdown source, which is the cleanest version to read. The equivalent web page sits at the same address without the .md extension. ## Key pages - [Home](https://www.woodrufftraining.com/): Services, pricing, how the training works and the contact form. - [Courses](https://www.woodrufftraining.com/courses): Every course in full: format, duration, who it is for, topics covered and what a team takes away. - [Free resources](https://www.woodrufftraining.com/resources): Every free download and tool in one place: the phishing poster, the first hour incident card, the AI acceptable use policy template, the Cyber Essentials checklist, the business continuity plan template and the two browser-based tools. Nothing is gated behind a form. - [Cyber Essentials readiness checklist](https://www.woodrufftraining.com/cyber-essentials-checklist): A free interactive checklist covering the five Cyber Essentials controls, with a printable PDF at /resources/cyber-essentials-checklist.pdf. Preparation only: certification is issued by IASME-licensed certification bodies, not by Woodruff Training. - [Password strength checker](https://www.woodrufftraining.com/password-check): A free tool that estimates how long a password would survive a real cracking attempt. Runs entirely in the browser; nothing typed into it is transmitted or stored. - [Blog index](https://www.woodrufftraining.com/blog): Plain-English guidance on cyber security and safe AI use for small businesses. ## Services in detail - [Bespoke courses for your organisation](https://www.woodrufftraining.com/services/bespoke-courses): A cyber security or AI adoption course written around your business rather than a generic one with your logo on it, built and hosted on our online learning portal with tracking and certificates handled for you. From £1,950. Per course, including the first year of hosting on the portal. - [Business continuity planning](https://www.woodrufftraining.com/services/business-continuity-planning): A written plan for carrying on when something stops you working, built in a half-day workshop with the people who would actually be holding it, then tested with a tabletop disaster exercise. From £850. Half-day workshop, the written plan, and a review a year later. - [Cyber Essentials readiness](https://www.woodrufftraining.com/services/cyber-essentials-readiness): Get your business ready to pass Cyber Essentials without the scramble. We work through the five controls with you, fix what needs fixing, and have your answers ready before you apply. From £695. Excludes the certification body’s own assessment fee. - [Tabletop disaster exercises](https://www.woodrufftraining.com/services/tabletop-exercises): A facilitated walk-through of a realistic disaster with the people who would actually have to deal with it: ransomware, a fire, a flood, a supplier that folds overnight. No systems are touched. The point is to find out who does what, before it matters. From £595. Half a day, onsite across West Sussex or live online. ## Articles - [AI will answer any question you ask it. That is the risk.](https://www.woodrufftraining.com/blog/asking-ai-for-business-advice.md): Plenty of owners now use AI as a free legal, HR and tax adviser. It is genuinely useful for some of that and quietly expensive for the rest. Here is where the line sits. - [A client has asked if we have Cyber Essentials. What now?](https://www.woodrufftraining.com/blog/client-asked-for-cyber-essentials.md): It usually turns up in a tender or an email from someone in procurement. Here is what the scheme actually involves, which version you probably need, and where applications come unstuck. - [Why telling staff off makes your security worse](https://www.woodrufftraining.com/blog/carrot-not-stick-security-culture.md): Punish someone for clicking a bad link and they will keep quiet about the next one. Here is what to reward instead, and what to measure. - [If your website runs WordPress, update it this week](https://www.woodrufftraining.com/blog/wordpress-update-now.md): A serious WordPress flaw is already being used by attackers. Updating to the latest version shuts the door, and it takes minutes. - [The best password is no password](https://www.woodrufftraining.com/blog/best-password-is-no-password.md): Passkeys let your team sign in with a fingerprint, a face or a device PIN instead of a password. There is nothing to guess, nothing to phish and nothing worth stealing. - [Your staff are already using AI. Are they doing it safely?](https://www.woodrufftraining.com/blog/staff-using-ai-safely.md): Chances are your team already leans on AI to get through the day. That is no bad thing, as long as they are not quietly handing customer data to a stranger. - [The fake AI tool problem, and how to download safely](https://www.woodrufftraining.com/blog/fake-ai-tools-scams.md): Criminals are hiding malware inside apps that pose as popular AI tools. Here is how to get the benefits of AI without letting one in. - [There is a market for stolen business logins. Stay off it.](https://www.woodrufftraining.com/blog/stolen-logins-for-sale.md): Criminals buy and sell access to small business accounts. A few simple habits keep your logins from ending up on the list. - [Five phishing red flags every employee should know](https://www.woodrufftraining.com/blog/spotting-phishing-emails.md): Most attacks on small businesses start with a single convincing email. Here are the five warning signs to teach your whole team. - [MFA, the best £0 you'll spend on security](https://www.woodrufftraining.com/blog/mfa-small-business.md): Multi-factor authentication blocks the vast majority of account takeovers, costs nothing on most systems, and takes an afternoon to switch on. - [Invoice and QR-code scams to watch for on the South Coast](https://www.woodrufftraining.com/blog/invoice-and-qr-scams-south-coast.md): Small businesses across Sussex and Hampshire keep running into the same two scams. Here is how they work and how to shut them down. ## Downloads - [Phishing red flags poster (PDF)](https://www.woodrufftraining.com/resources/phishing-red-flags-poster.pdf): A printable one-page A4 poster of the five warning signs, with a blank line for the internal reporting contact. Free to print and display. - [The first hour incident card (PDF)](https://www.woodrufftraining.com/resources/first-hour-incident-card.pdf): A printable one-page card covering what to do, and what not to do, in the first hour of a suspected cyber incident. Includes blank lines for a business to write in its own contacts. - [AI acceptable use policy template (PDF)](https://www.woodrufftraining.com/resources/ai-acceptable-use-policy-template.pdf): A three-page policy template a small business can adopt, covering approved tools, what must never be entered into an AI tool, checking output, accounts and reporting. A starting point to adapt, not legal advice. - [Cyber Essentials readiness checklist (PDF)](https://www.woodrufftraining.com/resources/cyber-essentials-checklist.pdf): The printable version of the readiness checklist, covering scope and the five controls. - [Business continuity plan template (PDF)](https://www.woodrufftraining.com/resources/business-continuity-plan-template.pdf): A six-page fill-in continuity plan for a small business, covering who can invoke it, the first hour, critical activities and recovery times, risks, loss scenarios, contacts, an emergency pack, communications and a decision log. Follows the structure of the Cabinet Office Business Continuity Management Toolkit, which publishes guidance but no template of its own. A starting point to adapt, not legal or insurance advice. ## Optional - [Everything in one file](https://www.woodrufftraining.com/llms-full.txt): The whole site as a single Markdown document, including every article in full. Use this instead of fetching pages individually. - [Privacy policy](https://www.woodrufftraining.com/privacy): How the site handles enquiry details and why it sets no tracking cookies. - [Terms of business](https://www.woodrufftraining.com/terms): How work is quoted, booked, invoiced and delivered, including deposits, payment terms, cancellation and rescheduling, and the limits of what training and advice can promise. - [Sitemap](https://www.woodrufftraining.com/sitemap.xml): Every indexable URL on the site.