Mathisi — Security Awareness | Pistos Information Protection

Aegis is the CISO enablement layer that runs PCS — Pistos Compliance Sentinel, the platform that turns each regulatory requirement into a scored question and keeps the evidence behind every answer. Aegis delivers CISO-level accountability two ways: Pistos supplies a named senior advisor as your designated CISO, or your internal CISO runs the program backed by the full capability of PCS.

Mathisi is the pillar that reaches every employee. It moves the security program out of the filing cabinet and into the workday — through tiered training, monthly refreshers, realistic phishing simulations, and debriefs of real breaches relevant to your industry.

The aim is not to satisfy a training checkbox. The aim is that your workforce becomes the first line of defense — informed, practiced, and accountable.

The library runs to 560 courses, 14 documentaries and 4 games, covering more than eighty cybersecurity topics — from what a phishing email actually looks like, up to governing your agency's use of AI. Modules are illustrated and narrated, each closing with a graded knowledge check; the games carry 400 questions across 38 categories. The syllabus is current, which is why AI governance is on it and is not on most awareness libraries yet.

The games are not decoration. People finish them — and a finished course is the evidence the control needs. Completion is what the framework asks for; engagement is what produces it.

Introduction to Cybersecurity

Foundational training every employee takes at onboarding — the baseline vocabulary, the everyday threats, and the behaviors that prevent most incidents before they begin.

Intermediate

Role-specific training for staff with elevated access — producers, account managers, finance, HR — tuned to the attacks that target their specific workflows.

Advanced

Deep training for IT leadership, privileged users, and designated incident handlers — how to recognize a live incident and how to act in the first fifteen minutes.

Training & Awareness

Monthly refreshers and annual workforce certifications — with dated completion records linked to each employee, ready for an examiner or underwriter to review.

Phishing Simulations

Realistic phishing campaigns targeted to your industry and workflows, with after-click coaching for anyone who engages — no shame, no spectacle, just repetition.

Real Security Events

Debriefs of actual breaches at peer organizations — what happened, how it was noticed, what it cost, and what would have changed the outcome. Generic content doesn't move the needle; neighbors' stories do.

How Mathisi fits the program

Mathisi is the most visible pillar to your staff because it's the one they consume. But its value to the compliance program is less about what people watch and more about what it produces: dated training completion records, phishing simulation results linked to each employee, and the workforce competency documentation every major framework requires.

A completed course is evidence, not a tick in a box: who took it, which course, what date — recorded against the person and filed against the control that asks whether your staff are trained. When PCS surfaces a finding from Skopein — a misconfigured account, a stale permission, a repeated click on a phishing test — Mathisi is where the behavioral remediation happens, and the completion record closes the control. Scan, document, train.

See Mathisi against your workforce.

Request a briefing and we will tailor a Mathisi training roadmap to your industry, your headcount, and the regulatory training requirements your frameworks impose.

Request a briefing