Cyber Strategy

Internship summary

NVISO is a pure-play cyber security consulting firm: our team is composed of security professionals who each have their specific field of expertise, ranging from Information Security Governance, Risk & Compliance to Incident Response, Penetration Testing, CSIRT/SOC, Software Security, and Training & Awareness. This fantastic blend of skills enables us to help organizations prevent, detect, and respond to complex security challenges.

Clients increasingly ask NVISO not only to operate phishing simulation and awareness programmes, but also to help them interpret the results: Which behavioural security indicators matter? What do they reveal about the organisation’s human risk? Which action should follow?

Today, this analysis is largely performed manually, based on reports and exports from phishing simulation and awareness platforms. During this internship, you will help transform this manual effort into a reusable NVISO asset.

The internship consists of two connected workstreams:

1. Cyber Safe Behaviour Dashboard: developing a Power BI dashboard that consolidates phishing simulation and awareness data into clear, actionable behavioural-security insights.

2. NVISO Awareness-as-a-Service Catalogue: creating a structured overview of NVISO’s awareness and training opportunities, taking the dashboard conclusions/recommendations as input to serve as possible interventions when gaps are identified.

The dashboard identifies where risks exist; the Awareness-as-a-Service Catalogue helps identify the most appropriate response. Together, they will support consultants and account teams in moving from data and reporting to practical, evidence-based recommendations.

Workstream 1 — Cyber Safe Behaviour Dashboard

The first workstream focuses on the development of a Power BI-based Cyber Safe Behaviour Dashboard.

The dashboard will bring together data from phishing simulations, awareness campaigns and training activities. It will provide consultants and clients with a structured overview of behavioural security performance, trends and areas for improvement.

The initial solution will use an Excel-based data layer and should be designed to work with data exports from phishing simulation or awareness platforms. Where feasible and depending on access to a selected platform, the intern may also implement one API-based data connector.

The dashboard is expected to provide insights at management, team or department level. Individual-level data should only be used where necessary, properly anonymised or pseudonymised, and in line with GDPR, proportionality and NVISO’s non-punitive approach to behavioural security.

Main activities

• Review available phishing simulation, awareness and training data sources.

• Design a practical, reusable data model in Power BI.

• Define the KPI framework

• Build Power BI visualisations and management reporting views.

• Implement an Excel/CSV-based data-ingestion process.

• Implement one API connector to a selected platform.

• Create a “close-the-gap” view that links weak KPI results to recommended awareness interventions.

• Building a baseline to then analyse trends over time, such as pre- and post-campaign performance.

• Market analysis of awareness tools, solutions etc in the current cyber security market (BE, EUR, Global)

Workstream 2 – NVISO Awareness-as-a-Service Catalogue

The second workstream focuses on creating a structured Awareness-as-a-Service Catalogue for NVISO.

NVISO already delivers a broad range of awareness and training opportunities, but relevant information may be spread across different documents, service descriptions, presentations and pricelists. The intern will help create a more consistent and machine-readable catalogue that can serve as the foundation for dashboard recommendations.

The catalogue will focus primarily on awareness and training offerings, while also capturing selected adjacent NVISO services, e.g. threat reporting/ SOC findings, that may be relevant when dashboard findings indicate a broader security issue.

The objective is to create a practical first version of the catalogue, a consistent template and a documented maintenance approach that NVISO can expand over time.

Main activities

• Inventory NVISO’s existing awareness and training offerings.

• Review available service lists and pricelists relevant to awareness and behavioural security.

• Identify duplicate descriptions, inconsistent naming or missing information.

• Structure these offerings in a consistent catalogue format in relation to cyber security threats.