Richard Choo

Background

About Richard Choo

Most SME “security awareness” fails for one reason: it teaches information, not behaviour.I train SME teams to build security habits that hold under pressure—when a fake invoice lands, when a “CEO” WhatsApps, when a link looks urgent, when someone is rushing to close the day.My approach is simple: make the right action the easy action.What I deliver (practical)- Phishing + scam defence (Email / WhatsApp / SMS impersonation)- CEO fraud / invoice fraud prevention (verification routines that don’t slow ops)- Password + MFA habits- Safe sharing + data handling (Google Drive/OneDrive permissions, leak prevention basics)- Device hygiene (updates, Wi-Fi, backups, USB risks)“First 15 minutes” incident playbook (who to tell, what to save, what NOT to do)- How it works (behaviour change, not posters)- Real scenarios your staff actually face (SME context)- Short sessions + high frequency (so habits form)- Simple scripts + checklists (so people act correctly fast)If your SME wants fewer “human-error” incidents and more calm, repeatable security behaviour, message me with: team size + industry + your biggest pain (phishing / scams / data leaks).