Six Domains, One System.
Fourteen functions in six domains, run from one console and written to one record for every person. The domains read each other continuously; none is one and done.
Know, Learn, Practice, Act, Own, Measure.
Know
- Leak Check: work email and passwords found in known breaches, checked on the device; the password never leaves it
- Social Footprint: what public profiles and data brokers reveal that an attacker can use
- Identity Risk: MFA enrollment, push prompts approved under pressure, risky sign-ins
Learn
- AQUILA Academy: scheduled awareness training, plus two-minute lessons built from the person’s own mistakes
- Safe AI Use: a coaching note when company data is pasted into an unapproved AI tool
Practice
- Phishing Simulation: email, text and QR lures on any cadence, coached at the moment of the click
- Incident Drill: the person rehearses their own role when something real happens
Act
- Sniff & Detect: check any email before acting; if it bites, it is removed across the organization
- AQUILA Handshake: the recipient asks the real sender, who confirms from their phone
- Report and Send-Safe: one press to report, and a warning before the wrong recipient or sensitive data is sent
Own
- Policy Read & Sign: the policies that apply to them, signed in one place, with the date
- My Role: who to call and what to do when something happens
Measure
- Personal Score: one score on one gauge, visible to the person and the security leader
- Evidence Record: what the person fixed, reported and signed, dated and ready for management and the auditor
One Weakness Moves the Other Five.
A person can be strong in training and simulations and still be exposed through their public footprint. When one domain carries the higher risk, it moves the other five, each to the degree that fits.
Exposure Found
A payment approver’s home address and role are public. The exposure is shown to the person first.
Defense Adjusted
A targeted simulation follows, and AQUILA Handshake becomes the expected step on payment requests they receive.
Accountability Recorded
The callback procedure is signed, the score moves, and the evidence record shows what changed and when.
From Signal to Action.
From One Person to the Whole Workforce.
A person holds a role, sits in a department, may belong to a group that crosses departments, and is part of the whole workforce. A signal enters at one layer and can climb.
Staying at the person is coaching: one lesson, one setting changed, one step added.
Every payment approver receives the exposure check, the callback procedure to sign and a targeted simulation.
A department’s score dips, and it receives a focused campaign in the next cycle.
A pattern shared across departments, such as finance leadership, is addressed once for the whole group.
Reaching the workforce changes the program itself: the calendar, the courses and the campaigns.
See the Six Domains on Your Own People.
A short session on your organization’s shape: your departments, your tools and your calendar.