Training Your Teams in Cybersecurity: A Guide for Moroccan Companies

Because technology alone is not enough. A well-configured firewall does not stop an employee from typing their password into a fake login page, or an administrator from leaving a service exposed out of unawareness. A large share of security incidents involve, at some point, a human error, a lapse in vigilance or a missing skill. Training your teams shrinks that human attack surface and makes the tools you have already bought genuinely effective.

In Morocco, three more factors come into play. First, Law 05-20 on cybersecurity and the DGSSI frameworks, including the DNSSI, require the entities concerned (public administrations, public institutions, critical infrastructure, certain operators) to implement security measures that depend on in-house skills, and these requirements often flow down to their suppliers. Second, clients, especially European ones for offshoring and service companies, increasingly ask for assurances: security policies, trained staff, sometimes ISO 27001 certification. Finally, many tenders reward or require certified profiles on the project team.

The first mistake is sending everyone on the same course. Needs vary widely by role. Start with a simple map: who does what in your information system, which risks are priorities, and which skills are missing today. An audit, a recent incident or a client requirement is often a good starting point.

Recognised certifications offer two benefits: they structure learning around a proven framework, and they provide evidence you can show clients, auditors and public buyers. Here are the most common matches, with our public prices (exam voucher included).

In a public (inter-company) session, your staff join a scheduled class with participants from other organisations. It suits one or two people and lets them exchange with peers from other sectors. The dates, however, are set in advance.

In an in-house (intra-company) session, the class is reserved for your teams, on your premises or live online. It becomes worthwhile from a small group upwards: the schedule fits your constraints, examples can reflect your context and discussion is freer, since people can talk about their own information system. For sensitive topics, it is often the preferred format.

The budget depends on headcount, target certifications and format. Think in terms of total cost: training, exam, time away from production, any certification maintenance fees and revision time. A phased approach that prioritises the most exposed roles spreads the effort over several financial years.

The return on security training is rarely measurable in exact dirhams, since the main goal is to avoid incidents. Qualitative and operational indicators are still telling:

Moroccan companies that pay the vocational training tax may, under certain conditions, obtain partial reimbursement of some training actions through the special training contracts (contrats spéciaux de formation, CSF) managed with OFPPT. Eligibility rules, caps and procedures (including filing deadlines and advance planning of the actions) change over time: check directly with the relevant bodies or your professional federation before committing the spend, and factor this in from the moment you design your training plan.

Beyond public schemes, consider internal levers: the annual training budget, group rates, combining several departments in one session and spreading certifications across the year.

A yearly plan avoids training decided in a rush after an incident. It links each action to an identified risk or requirement and makes funding applications easier.

GATech supports Moroccan companies with certification courses that include the official exam voucher, as public sessions in Casablanca or Rabat, live online, or in-house on your premises anywhere in Morocco. For your training plans, the group rate gives 15% off from 3 participants from the same company in the same session, and early registration gives 10% off when payment is made at least 4 weeks before the session starts. Discounts cannot be combined.

For employees who fund their own path, 3 interest-free instalments and 15% off for students and recent graduates remain available. Contact us for a quote aligned with your yearly training plan.