Security awareness training for firms that live and die by procurement and payment approvals
A contractor's finance team gets an email that looks like it is from a procurement officer, asking to update bank details on a pending payment. If anyone pays it before calling to confirm, the real payment is gone. Government contractors carry this exposure every time a tender, invoice, or payment approval moves by email.
What contractor finance and admin staff actually face
- Invoice and payment-redirection fraud - an email appearing to come from a government client or subcontractor asking to update bank account details before the next payment.
- Fake procurement or tender emails with malicious attachments disguised as bid documents or addenda.
- Impersonation of a known procurement officer or finance director, often via a lookalike email domain, pressuring urgent payment approval.
- Phishing aimed at staff with access to tender portals, company registration documents, or procurement credentials.
- Social engineering calls claiming to be from a ministry or agency, asking to "confirm" company or banking details over the phone.
Act 843 and the Cybersecurity Act
Government contractors handle procurement, personnel, and financial data covered by Act 843, and operate in a sector the Cybersecurity Act's broader intent reaches, particularly where systems connect to public-sector infrastructure. We map modules openly to both and recommend confirming current procurement-security requirements directly with the contracting agency.
See Ghana's regulatory drivers →Frequently asked questions
Does this training satisfy a specific procurement security requirement?
We do not claim it satisfies a specific clause in any single contracting agency's procurement rules. It is built to support the staff-awareness intent behind Act 843 and the Cybersecurity Act, and we recommend confirming any contract-specific security requirement directly with the contracting agency.
What is the single most common way contractors lose money to fraud?
Payment-redirection (invoice) fraud: a convincing email asks finance staff to pay a real invoice to a new, fraudulent bank account. The fix is procedural as much as technical - never changing payment details based on an email alone, always confirming by phone using a number you already had, not one in the email.
Can this training be rolled out to a small finance team quickly?
Yes. Modules are 3-7 minutes each; a small finance or procurement team can complete the core invoice-fraud module in a single sitting.