ISO 27001 Certified badge by A-LIGNNewsWhalemate is ISO/IEC 27001:2022 certifiedSee Trust Center

Cybersecurity courses for companies, ready to assign

Courses in Spanish, Portuguese and English, segmented by profile: everyone, technical, executives, operations and compliance. Reviewed at least once a year.

Book a demo
How it works

How each course is built

Filter by profile, language and topic

You filter everyone, technical, executives, operations or compliance; Spanish, Portuguese or English; and the topic. What you see here is the published compliance cut, not the full inventory.

Video, written lesson and quiz

Each course ships with video sections, a written lesson and a final quiz. Progress and pass live on the platform. If you export to an LMS, that is SCORM: another page. Here the course is taken and measured.

Minimum annual review

Every catalog course is reviewed at least once a year. It is not a “fresh content” marketing seal. It is policy: if a standard or a vector changed, the piece cannot still be the one from three years ago without a review pass.

Certificates and SCORM

Whoever passes can take a certificate. Whoever already runs an LMS can export the SCORM package. The certificate is not the full evidence of the program; it is the record of that course. Behavioural evidence still lives in analytics and simulations.

Production

How catalog videos are made

Avatar, voice and edit. This clip is not a course: no quiz, no pass. It is the same technique we use for the video sections. The Fede you see is synthetic.

The sample is in Spanish. Catalog courses ship in Spanish, Portuguese and English according to the filter above.

A course is taken and measured. This is watched: a sample of how we produce the piece.

Short courses, in the language of the person taking them, with a declared profile

A catalog of cybersecurity courses for companies is not a generic

It is the library the program assigns: short pieces, in the language of the person taking them, with a declared profile. Everyone does not read what an implementer reads. An executive does not need the OWASP lab. Operations needs the plant-floor gesture, not the ISO control written for audit. The catalog exists so that distinction is made before anyone hits assign.

Every published course has the same format

It is not a loose PDF or a parked webinar. The video is taken as a course. The written lesson holds the criterion. The quiz leaves a score and a pass state. That is what an auditor can ask for and what People can show. We do not publish a total: commercial material says one figure and the listed catalog says another. Until they match, we do not invent a number.

The catalog does not replace adaptive training

The engine chooses what to send from behaviour. Here is what there is to send, who it is for and how it is kept current. What you see here is the compliance cut (ISO, PCI, OWASP and sibling standards), not the platform’s full inventory. If you want who gets reinforcement after a fail, go back to adaptive training. If you want the piece, the language and the profile, you are in the catalog.

Minimum annual review policy

Every Whalemate catalog course is reviewed at least once a year. The bar is not “refresh the intro”. It is running the piece against the current vector and standard: a Top Ten that changed year, a control an auditor no longer accepts as a 2019 video, a phishing example the roster already memorised. If the review did not happen, the piece is not presented as current.

Your organization’s custom courses

You can load your own courses. They stay in your account. Other customers do not see them. They are for an internal procedure, a vendor, a brand or a risk the public catalog does not cover. Assignment and evidence work the same way. Content freshness is yours: the mandatory annual review is of the Whalemate catalog, not of your material.

Certificates and SCORM

The PDF certificate records name, course and pass. SCORM lets People run the same piece in the LMS they already use. Neither the PDF nor the package replaces the risk index or automatic assignment after a fail. If the LMS is the training record system, export. If the program has to react to behaviour, the course is taken here.

What it is for

What it is for when the roster is not a classroom

It is for covering people who will not sit through a forty-minute

The same program does not send them the same piece. The catalog has that decision already made. People assigns by profile. Security does not build a deck per area. Compliance sees that the standard has a version for everyone, one for executives and one for whoever implements.

It is also for when the customer brings their own material

Custom courses live in your account, not in the public catalog. They are not mixed with ISO or PCI. The rest of the organization does not see them. The annual review policy applies to the Whalemate catalog; you maintain your own material, with the same assign and audit flow.

In the cycle

How it connects to adaptive training

The catalog is the inventory. Adaptive security awareness training is the engine that decides which piece goes out, when and to whom, from behaviour. A phishing fail does not “open the campus”: it fires the contextual course. A low-risk profile is not saturated with the same annual pack. Without a catalog the engine has nothing to assign. Without the engine the catalog is another library nobody finishes. Compliance, AML/CFT and privacy have their own pages: the standard, the country, the data law. From here you reach those three. The assignment engine is still one.

Capabilities

How this module is used

Compliance courses: ISO 27001, PCI DSS and more

Training by standard, with versions for everyone, executives and implementers. ISO 27001, PCI DSS, OWASP, LGPD and TISAX.

Anti-money laundering (AML/CFT) courses

AML/CFT training adapted to each country in the region, ready to assign and audit.

Privacy and personal-data protection courses

Personal-data protection training adapted to each country’s law in the region.

Gamification in cybersecurity: trivia, rankings and micro-content

Trivia with ranking, scores and competition between areas. Plus micro-content answered in under a minute, without entering the platform.

Cybersecurity awareness material

Ready-to-send pieces on phishing, ransomware, deepfake and passwords, as video, PDF and image. In Spanish and Portuguese.

Online security policy acceptance

Publish your security policy and record who read and accepted it, with name, date, UTC time and IP in an immutable log.

Questions

Questions about the course catalog

How many courses are there?
The public number is not closed. Commercial material says +120; the listed catalog, 76. Until that is unified, we do not publish a total.
Which languages are they in?
Spanish, Portuguese and English. Not every title has all three versions published at once: the language filter shows what exists.
Can I upload our own courses?
Yes. They stay visible only to your account. They do not enter the public catalog and are not offered to other customers. They are assigned and audited with the same flow.
Does the certificate replace behavioural evidence?
No. The certificate proves that person finished that course. An auditor of a human-risk program also asks for simulations, reporting and coverage over time. That does not live in the diploma PDF.
Can they be exported to my LMS?
Yes, as a SCORM package. What is kept and what is lost when you leave the platform is on the SCORM page. The catalog is not the export how-to.
Is the Fede video a course?
No. It is a production sample: avatar, voice and edit. A course is taken and measured with a quiz. The voice clone on a call is the vishing service. The fraud deepfake is another page.

Already a customer? See how it is configured

See the catalog against your roster

In thirty minutes we look at profiles, languages and what gets assigned after a simulation. It is not a campus tour.

Book a demo