Welcome back to our Cyber Security Awareness Month series! In our first blog, we explored why cybersecurity is crucial for every business, from legal obligations to real-world incidents in the UK. Now that we understand why cybersecurity matters, it’s time to focus on what we’re protecting against: the various cyber threats that can impact organisations like yours.
Cyber threats are evolving constantly. They don’t just affect big tech companies- they target businesses of all sizes, including small enterprises, charities, and financial institutions. Understanding the types of threats, where they appear, and how they work is the first step in staying safe.
Common Cyber Threats Explained
1.Phishing
Phishing is one of the most common and effective cyberattacks. Attackers send emails, text messages, or social media messages that appear to come from legitimate sources, like banks, suppliers, or government agencies. The goal is to trick recipients into sharing sensitive information, such as login credentials, bank details, or personal data.
Example: An employer receives an email that looks like it's from HMRC, warning of overdue taxes, and asking them to log in via a link. Clicking the link and entering login details gives the attacker access to the organisation's systems.
Red flags: urgent language, unexpected attachments, suspicious links, poor grammar, or unfamiliar sender addresses.
2. Malware
Malware, short for “malicious software,” is software designed to harm, disrupt, or spy on computers and networks. There are many types of malware:
- Viruses- replicate themselves and infect files or programs.
- Trojans- disguise themselves as legitimate software but carry a harmful payload.
- Spyware- secretly monitors activity, like keystrokes or browsing habits.
Malware can be delivered through email attachments, downloads, or infected websites. Once installed, it can slow systems, steal data, or provide remote access to attackers.
3. Ransomware
Ransomware is a type of malware that locks files or systems until a ransom is paid, usually in cryptocurrency. As we saw in Blog 1, ransomware can cripple organisations, cause lost revenue, and damage trust.
UK examples:
- In 2023, Royal Mail’s operations were disrupted for weeks after a LockBit ransomware attack, costing the company an estimated £10 million.
- In 2025, Marks & Spencer faced a ransomware incident affecting online orders and click-and-collect, with estimated losses of £300 million.
Even if you don't pay the ransom, the downtime and recovering costs alone can be devastating.
4. Data Breaches
A data breach occurs when sensitive information is accessed or disclosed without permission. This could be personal data, financial records, or internal company information. Breaches can happen due to hacking, human error, or lost devices.
Example: In 2024, a Scottish nursery suffered a data breach after employees were tricked by phishing emails, exposing children’s and parent’s personal information.
Data breaches can lead to reputational damage, regulatory fines, and loss of client trust. For training providers, safeguarding learner and staff information is critical.
5. Social Engineering
Social engineering exploits human psychology rather than technical vulnerabilities. Attackers manipulate people into revealing information or performing actions that compromise security.
Examples include:
- Impersonating a senior manager and requesting a bank transfer.
- Convincing staff to install software or click malicious links.
The most common tools are emails, phone calls, or in-person tactics. Social engineering often works hand-in-hand with phishing or malware attacks.
6. Insider Threats
Not all cyber threats come from outside. Insider threats originate from employees, contractors, or partners. These threats may be intentional (malicious insiders stealing data) or accidental (staff clicking a phishing link or misconfiguring a system).
Example: a staff member accidentally uploads sensitive learner records to a shared public folder. Even though no hacker was involved, the data is now exposed.
7. Supply Chain Attacks
Supply chain attacks occur when attackers compromise third-party vendors or service providers to gain access to their clients. This is increasingly common as businesses rely on multiple external services.
Example: The Marks & Spencer's ransomware attack in 2025 began through a third-party contractor, highlighting the need to assess and secure not just your systems but also those of your suppliers.
Where You Might Encounter These Threats
Understanding where threats might appear can help you recognise and prevent them. Common attacks vectors include:
- Email inboxes: Phishing emails and malware attachments are most common.
- Public Wi-Fi: Unsecured networks can expose sensitive data during transmission.
- Third-party software: Vendors or cloud services may be exploited to access your systems.
- Devices: Laptops, USB drives, or personal devices can be infected if not properly secured.
- Social media: Scammers may impersonate colleagues or companies to extract information.
Cybercriminals look for the weakest link, which is often human behaviour, so awareness and vigilance are key.
The Real Impacts of Cyber Threats
Even a single incident can have significant operational, financial, and reputational consequences:
- Operational: Systems can be shut down, causing delays, missed deadlines, or service interruptions.
- Financial: Recovering, fines, and lost revenue can quickly escalate, as shown by Royal Mail (£10 million) and M&S (£300 million).
- Reputational: Customers and partners may lose trust, impacting long-term relationships.
- Regulatory: Non- compliance with GDPR or industry standards can result in penalties and investigations.
Cyber security isn't just an IT issue- it affects every aspect of business operations. For training providers and other service-based organisations, protecting learner, staff, and client data is as important as safeguarding physical health and safety.
How to Stay Alert
Knowing the threats is only the first step. You also need to recognise warning signs and act promptly:
- Emails or messages that demand urgent action or seem unusual.
- Unexpected attachments or links in messages.
- Requests for sensitive information from unknown or suspicious sources.
- Software prompts or pop-ups asking for admin access without explanation.
- Unusual system behaviour, like slow performance or unexpected shutdowns.
Practical steps:
- Verify senders before responding to unexpected messages.
- Hover over links to check URLs before clicking.
- Report suspicious emails or activity to IT or your security contact.
- Keep software updated and use antivirus programs.
- Educate your staff and colleagues regularly- humans are your first line of defence.
Preparing Your Organisation
Cyber threats are inevitable, but preparation makes a huge difference. By understanding the types of threats and knowing how to spot them, businesses can:
- Minimise the risk of breaches.
- Reduce the impact of successful attacks.
- Protect sensitive data and maintain trust with clients and learners.
Remember, cybersecurity is not just a technical challenge; it's part of a safety culture, similar to fire drills or first aid. Awareness, vigilance, and training are critical to building resilience.
Looking Ahead
In our next blog, we’ll focus on practical steps to protect your organisation. Well introduce the 5 Cs of Cybersecurity, explore good cyber hygiene, and provide tips for building strong defences.
By combining awareness of threats (Blog 2) with understanding why security matters (Blog 1), you’ll be better equipped to keep your systems, staff, and learners safe.
October marks Cyber Security Awareness Month, a time to reflect on how much our work and personal lives depend on digital systems- and how vital it is to keep them secure.
To raise awareness of cyber security, were launching a three-part blog series to help you understand the importance of cybersecurity, recognise common threats, and take practical steps to stay safe online.
Just as we train teams to recognise physical hazards in the workplace, we must also learn to identify and prevent digital risks. Cyber threats don't just target big tech companies- they can affect any business, large or small, especially those that rely on online systems, email, or digital data.
The Growing Importance of Cyber Security
In 2025, digital safety is no longer optional. Every business holds sensitive information. Whether its client details, training records, or financial data, that information is valuable to cybercriminals.
According to the UK Government’s 2025 Cyber Security Breaches Survey, 43% of UK businesses experienced some form of cyberattack or data breach in the past tear. That figure rises to over 70% for medium-sized organisations. The most common threats include phishing emails, ransomware, and unauthorised access- many of which begin with a simple human mistake.
While this shows progress compared to previous years, it highlights a key truth: cyberattacks remain one of the most consistent risks to UK businesses.
Real- World Consequences
Cybersecurity breaches aren't just technical incidents- they have real-world impacts that affect operations, finances, and customer trust.
In April 2025, Marks & Spencer (M&S) suffered a ransomware attack, which affected online orders, app services, and click-and-collect operations. Hackers gained access via a third-party contractor using social engineering tactics, including SIM swapping. M&S did not pay a ransom, but the attack caused weeks of operational disruption, empty shelves in some stores, and delayed service restoration. The company estimated the financial impact at around £300 million, and personal customer data such as names, contact details, and order histories were accessed.
In late 2024, a Scottish nursery was hit by a cyber incident that exposed sensitive information belonging to children, parents, and staff. Hackers gained unauthorised access to the nursery’s internal systems after staff members were targeted with phishing emails, tricking them into revealing their login credentials. The breach resulted in the leak of personal details including names, addresses, emergency contacts, and in some cases, health or allergy information.
Legal Obligations and Accountability
Cyber security isn't just best practice- it’s a legal obligation. Under the UK General Data Protection Regulation (GDPR) and the Data Protection Act 2018, businesses must take “appropriate technical and organisational measures” to protect personal data.
That means ensuring information is processed securely, access is controlled, and staff are trained to handle data responsibly. A failure to do so can lead to financial penalties and lasting reputational harm.
The National Cyber Security Centre (NCSC) also recommends following core cybersecurity design principles, such as understanding your context, making compromise difficult, and planning for incident response. These steps don’t just satisfy compliance- they strengthen your overall resilience.
The Human Factor
Technology alone can't solve the problem. The majority of breaches stem from human error- clicking a suspicious link, sharing login details, or failing to update software. That's why awareness is your first line of defence.
Just as you train staff to spot trip hazards or follow safety procedures, cyber awareness training helps teams identify warning signs, handle data responsibly, and react appropriately when something seems suspicious.
Encouraging open communication is also key. Employees should feel comfortable reporting mistakes or concerns without fear- because quick reporting can prevent a small issue from becoming a major breach.
What to Expect from this Series
This post sets the scene for our Cyber Security Awareness Month blog series. Over the coming weeks, we'll be diving deeper into:
- Recognising Cyber Threats- We'll look at the most common types of attacks, from phishing and ransomware to insider threats, and how to spot them early.
- Building Cyber Resilience- We'll share best practices, including the 5Cs of Cyber security, and practical tips for creating safer digital habitat.
Our aim is simple: to make cybersecurity understandable, approachable, and part of your everyday safety culture.
Final Thoughts
At Raeburn Training, we believe safety is holistic. Whether it’s protecting people from physical harm or safeguarding sensitive data from digital threats, awareness and prevention go hand in hand.
By understanding why cybersecurity matters- and taking responsibility for it- every organisation can create a safer, more secure future.
If you have ever attended a first aid training course, chances are you’ve met Little Anne- the world’s most famous training mannequin. She has helped millions of people across the globe learn the lifesaving skills of cardiopulmonary resuscitation (CPR), and her story is just as fascinating as her purpose.
The Birth of Resusci Anne
Resusci Anne was first created in 1960 by the Norwegian toymaker Åsmund Laerdal in collaboration with Dr. Bjørn Lind and Dr. Peter Safar, often referred to as the “father of modern CPR.” Laerdal was inspired after saving his young son from drowning and recognised the need for a safe, realistic way to practice emergency resuscitation techniques.
Anne became the answer. Her lifelike design allowed trainees to rehearse chest compressions and rescue breaths in a way that no other tool at the time could replicate. She quickly became a standard fixture in first aid classrooms worldwide.
Why Resusci Anne Matters
The genius of Resusci Anne lies in her realism and accessibility. Trainees can:
- Learn the correct hand placement for compressions.
- Practice delivering effective rescue breaths.
- Build the confidence to act during a real emergency.
The muscle memory created during training with Anne helps bystanders react faster and more effectively.
A Face with a Story
One of the most striking details about Anne is her face. It is said to have been modelled after the “L’Inconnue de la Seine” – an unidentified young woman pulled from the River Seine in Paris in the 19th century. Her serene expression became a symbol of mystery and beauty, and over time, her likeness evolved into the face of the world’s most important training dummy.

Still Saving Lives Today
Over 60 years later, Resusci Anne is still at the heart of CPR training. Modern versions now include:
- Feedback devices that measure compression depth and speed.
- Digital connections to track trainee performance.
- Realistic airways for practicing advanced rescue techniques.
Thanks to Resusci Anne, countless lives have been saved by ordinary people who found themselves in extraordinary situations. Her legacy continues every time someone steps forward to learn CPR- and that someone could be you.
If you fancy meeting Anne for yourself and learning these vital lifesaving skills, why not join our next Emergency First Aid at Work course? You'll get hands-on experience with the world's most famous training mannequin, expert guidance from our instructors, and the confidence to act when every second counts.
The Health and Safety Executive (HSE) recently issued updated guidance on the importance of controlling hazardous substances in the workplace. These reminders are especially relevant to the construction industry, where workers are often exposed to harmful dust, fumes, chemicals, and solvents.
Complying with the Control of Substances Hazardous to Health (COSHH) regulations is not only a legal duty but also a vital part of safeguarding employees' long-term health and ensuring a safe, productive workplace.
What is COSHH?
COSHH stands for the Control of Substances Hazardous to Health. These UK regulations require employers to control substances that could be harmful to health, including:
- Chemicals and solvents
- Fumes, dust, vapours, and gases
- Biological agents such as bacteria and viruses
Exposure to these substances can lead to a range of health problems, from skin conditions and asthma to repiratory diseases and even cancer.
In construction, common examples include:
- Asbestos
- Silica dust from cutting, grinding, or sanding
- Cement dust and bitumen
- Solvents, adhesives, and paints
- Diesel exhaust fumes

Why COSHH Matters?
Failure to comply with COSHH can have severe consequences:
- Health risks for employees- respiratory illnesses, skin conditions, long-term diseases
- Legal and financial penalties- fines, enforcement action, and compensation claims
- Reputational damage- loss of trust, contracts, and business opportunities
A recent HSE case illustrates this risk: a chemical company was fined £100,000 after a worker suffered severe burns from a faulty steam hose. Inadequate maintenance and poor safety measures were to blame- highlighting why COSHH compliance is non-negotiable.
Employer Responsibilities Under COSHH
Employers must take a structured approach to managing hazardous substances. This includes:
- Risk Assessment- Identify hazardous substances, understand how exposure happens, and evaluate the risks.
- Control Measures- Eliminate hazardous substances where possible- or substitute with safer alternatives. Use engineering controls (e.g., local exhuast ventiliation) and provide safe storage solutions.
- PPE- Where risks cannot be controlled otherwise, supply appropriate Personal Protective Equipment such as masks, gloves, and goggles.
- Training & Information- Ensure workers know the risks, understand how to use controls safely, and are aware of emergency procedures. Raeburn Training can arrange both classroom based or online training, based on your teams requirements. Get in touch for more information.
- Monitoring & Health Surveillance- Regularly review exposure levels and carry out health checks where needed.
- Maintenance & Records- Keep equipment in good working order, log risk assessments, training, and monitoring activites.
- Emergency Preparedness- Have plans in place for spills, leaks, or accidents.

The Role of Training
Training is central to effective COSHH management. Workers need to:
- Understand the risks of the substances they handle.
- Know how to use protective measures and equipment properly.
- Be prepared for emergencies.
Employers should tailor training to their specific workplace and update it regularly. Ongoing refresher courses help ensure safety standards remain high and that businesses stay compliant with HSE requirements.
Best Practices for Businesses
To build a strong safety culture and meet COSHH obligations:
- Clearly label all hazardous substances with the correct hazard symbols
- Keep an up-to-date COSHH register of all materials
- Regularly review and refresh risk assessments
- Ensure PPE is available, maintained, and used correctly
- Involve employees in safety discussions and encourage reporting of hazards
Conclusion
Managing COSHH risks is a shared responsibility. By assessing hazards, implementing controls, and providing proper training, businesses can not only comply with the law but also protect their most valuable asset: their people.
A safe workplace boosts productivity, reduces absences, and builds trust between employers and employees.
Are you COSHH compliant? Now is the perfect time to review your workplace procedures and ensure your business meets all the required standards. If you are not sure where to start, our Health and Safety Consultants are here to help.
Good news for local businesses- the Business Gateway Expert Help scheme is continuing into this tax year, with the ongoing focus on helping businesses to grow.
Through this scheme, eligible businesses can access specialist consultancy support, typically covering up to two days of funded expert advice. For many, this represents a valuable opportunity to strengthen important areas of their business without the added financial burden.

How Expert Help Can Support Health & Safety
One of the most practical applications of the scheme is in supporting businesses with their Health & Safety arrangements. Expert consultancy can be provided in areas such as:
- Setting up or updating a Health & Safety policy
- Creating or reviewing a Health & Safety manual
- Carrying out risk assessments
- Auditing current arrangements to ensure compliance
- Developing a clear emergency plan
- Conducting DSE (Display Screen Equipment) assessments
These measures not only support compliance with legislation but also contribute to long-term business growth by fostering safer, more efficient, and more resilient workplaces.
Important Notes on Eligibility
The Expert Help programme is a Business Gateway scheme, and eligibility is assessed directly by them. A few key points to be aware of:
- There is a cap on government support a business can receive through this initiative- currently £2,870 within a two-year period.
- Consultancy support is subject to Business Gateway's approval.
You can find the full details of the scheme here: Business Gateway Fife- Specialist Business Advice
Next Steps- How to Access Support
Raeburn Training can assist businesses who are interested in accessing this support. In the first instance, we encourage organisations to contact our team directly for an informal discussion. We will then guide you through the next steps and ensure you are connected with the appropriate support through the Expert Help programme.
This is a valuable opportunity to access expert knowledge, strengthen business foundations, and focus on sustainable growth in the year ahead. We encourage any organisation considering improvements to their Health & Safety arrangements to explore the support available through the Expert Help scheme.
CITB is simplifying how employers access training support and making key changes to the Grants Scheme. While some funding routes are closing, others remain in place- and a new online portal will soon make applications easier. Below is a clear summary of what's changing, what's staying, and what to do next to protect your funding.

What's Changing
1. New Online CITB Grant Portal
From 24 September 2025, CITB is launching a new digital system, allowing employers to:
- Apply for a qualification and apprenticeship grants online.
- Track the status of applications in real time.
- Manage account details more easily.
2. Skills & Training Fund Closing
From 30 September 2025, the Skills & Training Fund will close. Employer Networks will become the single route for further developing businesses, while the Grants Scheme continues for day-to-day training. September funding will be paid on completion of the agreement under new payment terms.
3. Short Qualification Grant Change
From September 2025, a new grant tier applies to very short “Award” qualifications. The grant will be adjusted to £240 (previously £600), reflecting the shorter length and lower cost of these courses- but still providing valuable support for quick, efficient training.
4. Industry Accreditation Grant Uplift Ends
The enhanced grant for Management and Supervisory qualifications (linked to replacing CSCS Industry Accreditation cards) will end on 31 December 2025. After that, grants revert to the standard £600. These uplifts were introduced for a period to support the transition away from Grandfather rights to recognised qualifications.
5. End of “Suggest a Course” Feature
The “Suggest a Course” initiative is being retired, with Employer Networks now the main channel for shaping training priorities.
6. Plant Training Standards Updated
New plant training standards launched on 18 June 2025. Grants will be paid against the new standards (generally £250- £880 depending on category). These must be delivered by a CITB Approved Training Organisation (ATO) and carry the CSCS logo, which in practice means operatives will then need to work towards a Vocational Qualification (VQ). Older plant training/test grants will no longer apply for achievements on or after this date.
7. “Into Work” Grant Pilot End Date
The "Into Work" grant pilot supports employers by providing financial help for both the work experience component of approved further education courses and a three-month period of direct employment. This pilot will end on 30 November 2025.
What's Staying
CITB confirms the Grants Scheme continues. Employers can still claim for short courses, qualifications, and apprenticeships across England, Scotland, and Wales. In particular:
- Long qualifications (HNC, HND, degrees, etc.) remain funded- typically £1,125 per year attendance (up to six years) and £1,875 for achievement.
- Apprenticeship grants remain in place in all three nations, with nation-specific rules and eligible standards.
- Short qualification grants still cover NVQ/SVQ (NVQ L2+/SCQF L5+), NEBOSH Construction Certificate, plant VQs, and specified units- now with an explicit £240 rate for Award-level achievements from September 2025.
Who's Affected
- Employers: will need to transition to Employer Networks and the new portal.
- Learners on short Award courses: funding reduces to £240.
- Supervisors and managers under Industry Accreditation: must complete qualifications before December 2025 to benefit from enhanced grants.
- Businesses using the Skills & Training Fund: will now need to connect with Employer Networks.
Key Dates
- 18 June 2025: Plant training standards update
- 24 September 2025: CITB Grant Portal launches
- 30 September 2025: Skills & Training Fund closes
- September 2025: £240 Award-level grant begins
- 30 November 2025: “Into Work” pilot ends
- 31 December 2025: Industry Accreditation uplift ends
What You Should Do Now
1. Audit Your Training Plans
Review which staff are partway through qualifications, plant tests, or apprenticeships, and check if they'll complete before the funding rules change. Adjust budgets where achievements fall after rule changes.
2. Register for the New Portal
Set up CITB Online access before the new system launches on 24 September. You’ll need your CITB Levy number and company details to register. Once logged in, you can manage grant claims, training records, and funding applications through the portal.
3. Join Your Local Employer Network
With the Skills & Training Fund ending, ENs are now the channel for business development support and training priorities.
4. Align UK and Scottish Routes
Map NVQ/SVQ/SCQF pathways to maximise grant opportunities and identify which quals remain at £600 vs £240.
5. Update Plant Training
Make sure all training and testing follows the June 2025 standards to remain eligible for grants.
How Can Raeburn Training Help?

- Funding Check: speak to us about your training needs and we’ll map available grants, and flag any risks around deadlines.
- Scotland & UK coverage: we deliver training across Scotland and the UK, so can help align SCQF and NVQ/SVQ routes so mixed workforces remain compliant, and you maximise grants across borders.
- Employer Network Guidance: unsure which EN is best for your business? We work with a range of CITB Employer Networks and will connect you with the right one and help you influence local priorities.
If you’re looking to maximise access to CITB funding, Raeburn Training can support you from start to finish- from identifying the right grants to managing claims and delivering approved training. Contact our team today on 01592 724 797 or email [email protected].
CPCS Renewal Changes for Construction Professionals
The Construction Plant Competence Scheme (CPCS) has recently introduced a new Continuing Professional Development (CPD) module, replacing the traditional renewal tests. This change marks a significant shift in how construction professionals maintain their CPCS Blue Competent Operator cards. Let’s look at what these modules entail and why the process has changed.
What is a CPCS CPD Module?
The new CPCS CPD modules are designed to ensure that plant operators’ knowledge and skills remain current and relevant. The modules cover a range of topics, including:
- People Plant Interface
- Sustainable Plant Operation
- Eco Operation
- Legislation Changes
- New Technologies in Plant Equipment
The modules are accessible through the NOCN Hub and can be completed on any device with internet access, offering flexibility and convenience for employers and employees alike.
Why the Change?
Accourding to NOCN, the shift from traditional renewal tests to the CPD module was driven by several key factors:
Streamlined Learning: The new CPD module eliminates the need for multiple category-specific tests, providing a more streamlined and cohesive learning experience.
Relevance and Practicality: The CPD module focuses on practical, industry-relevant topics that directly impact daily operations and safety on construction sites.
Flexibility: With the online format, operators can complete the course at their own pace and convenience, reducing downtime and disruption to their work schedules.
Cost-Effectiveness: The CPD module is priced similarly to the previous renewal tests, ensuring that the transition does not impose additional financial burdens on operators or their employers.
Industry Collaboration: The development of the CPD module involved extensive collaboration with industry stakeholders, ensuring that the content is aligned with current industry standards and practices.
How to complete your CPCS Renewal - Competent Operator
The CPCS Blue Competent Operator Card renewal process involves several key steps to ensure operators maintain their qualifications.
- Operators must hold a valid CPCS Blue Card and have passed the relevant health, safety, and environment test within the last two years.
- Complete the CPCS CPD Renewal for the categories they wish to renew. These can be completed at Raeburn Training, or remotely. Once you recieve the link to your personal NOCN Hub portal, you must register within 14-days to activiate the account. The modules can then be completed in your own time. Results take up to 48-hours to be verified and send to candidates.
- Candidates must also demonstrate ongoing practical operating experience through: a digital or paper logbook, on-site assessment, or practical test.
Applications can be submitted online or by mail, and cards are issued for five years from the last expiry date. The process also includes provisions for cards expired up to five years and the phasing out of cards obtained via Industry Accreditation by December 31, 2024.
At Raeburn Training we can support candidates through all stages of the CPCS renewal process, inlcuding hosting candidates at our premises while they complete their modules, providing IT support and guidance.
Conclusion
The introduction of the new CPCS CPD modules represents a forward-thinking approach to professional development in the construction industry. By prioritising relevant, practical learning and offering greater flexibility, this new process ensures that plant operators are well-equipped to meet the demands of modern construction sites.
If you have any questions or need further information about the new CPCS CPD module process, feel free to reach out to our team - [email protected].
Fife Council Civils Academy
Raeburn Training recently welcomed 16 students from local high schools onto the Fife Council Civils Academy. This week-long programme was designed to give school leavers an insight into life in the civils industry and help to address recruitment concerns in the industry.
Recruitment in the Civils Industry
Many industry sectors are suffering from skills shortages, more so now because of Brexit. The estimates from the Civil Engineering Contractors Association (CECA) training and development conference last year really caught our attention. They estimate by 2026, 25,250 new workers are required in the industry, due to various factors including current age demographics and planned public spending in the sector.
In response to these statistics, CECA are launching the CECA Academy, working alongside colleges to provide tailored training to candidates who are looking to enter the industry. The initiative goes live across the UK this summer with some of Scotland’s colleges taking part, including Fife College which is hugely exciting for our local area.
After attending the CECA conference Sarah Raeburn, Director of Raeburn Training, decided to create a programme targeted at high school leavers. Having had personal experience of recruiting into the civils industry, Sarah felt a frustration around this skilled role, civils operatives, being forgotten alongside the more traditional trades such as joiners, electricians, and plumbers. Working in partnership with the local employability team at Fife Council, they agreed this programme would encourage candidates to consider a career in civils.
The Civils Academy Programme
Using the skills and relationships she has built over the years, and her team at Raeburn Training, Sarah developed a civils academy programme with the following key aims –
- Provide an insight into the civil sector, the various sectors within, opportunities and entry routes.
- Allow candidates to experience some practical skills used in the industry, such as building a bridge, laying foundations, digging drainage, and hard landscaping.
- Equip candidates with vocational training to allow them to move directly into work placements or jobs.
- Facilitate site visits of live construction sites, to allow candidates to see how their training is applied in a real-world environment.
This new academy format was piloted back in October 2022, with candidates gaining qualifications which included REHIS Elementary Health & Safety and the much sought after CSCS card.
Raeburn Training were delighted to have the support from the Fife Council Pre-Employment Programme Team and the DYW who working closely with the schools, and last week welcomed our second group of candidates onto the academy programme. Candidates successfully completed the week-long academy, gaining their vocational qualifications, and we look forward to welcoming them all back for their CSCS tests.
Construction Site Visit
During the academy, the candidates had a unique opportunity to visit the new Fife College – Dunfermline Learning Campus, which is currently being built. The candidates, and staff, received a warm welcome from the team at Balfour Beatty, who provided them with an overview of the project as well as a tour of the site, which allowed them to ask questions, and see the scale and variety of work being done.
This visit was invaluable to the candidates, who even had the opportunity to be on the building itself, getting a birds-eye view of the project! It certainly was a unique experience for them all, so a huge thank you to all the team at Balfour Beatty for inspiring the candidates, and special thanks to Duncan Gardner for organising.
Speaking about the academy week, Sarah Raeburn said, “the group of candidates who embarked on this scheme impressed me with their quiet determination, and it was great to see their confidence grow throughout the week. There were some very capable candidates, and with the help of the Fife Council Pre-Employment Programme Team, I have every confidence they will succeed in finding their first role in the industry. Thank you to the Fife Council Pre-Employment Programme Team for your support pre, during, and moving forward supporting these youngsters into construction roles.”.
Employability Project Officer, Marion Molloy, added that “feedback from our participants was that it was a great programme for young people, giving a good introduction and insight to the civils industry. Participants also felt that gaining recognised qualifications was useful for them in decision making for their future in the industry, that the academy provided good life skills, and they particularly liked the practical aspects of the week, along with the site visit.”.
If any local employers within Fife or CECA members can offer work placements to candidates, or have vacancies at entry or apprenticeship level, please contact [email protected] and Brian, Marion or Mei would be delighted to chat.

What is ITA funding?
ITA is short for Individual Training Accounts, a scheme funded by Skills Development Scotland (SDS). It gives individuals up to £200 towards a single course or training package per year. The funding is available to help build their skills, either for a new job or to help with their personal development within an existing role. The best part is, ITA funding is not a loan, so you don’t have to pay it back!
Am I eligible for ITA funding?
ITA funding is available if you are:
- Aged 16 or over
- Resident in Scotland
- Unemployed and looking to get back into work
- Not in education or involved in any other SDS funded programme
If you are working, you can still apply if you earn £22,000 or less and want to upskill, or reskill, for your present job or a new one
What courses are available?
SDS maintains a register of approved training providers including colleges and local training companies. The My World of Work website lists all the courses available, which are very varied and are based across Scotland.
With so many courses listed, we suggest using the search functions to find the right course for you.
Keyword – this is useful if you have a course in mind
Location – add the radius you are able to travel
Qualification type – vocational, undergraduate, HNC/HND etc
How you wish to study – online, distance learning, evening, weekend, etc
How do I apply for an ITA?
There are 4 key steps involved in accessing ITA funding.
- Search and select an ITA course, using the link above.
- Apply online for ITA - click on the button “Apply for ITA funding” on the course page as highlighted below.
- Receive confirmation – note of documents accepted as income provided
- Contact the training provider to confirm and book your course (within 4 weeks of receiving your confirmation email)
You will be required to provide proof of income or benefit status. Should you have a special requirements, or a disability, and would like additional help in applying for ITA funding, please call the SDS ITA helpline on 0800 917 8000 or email [email protected].
What training does Raeburn Training provide?
We currently offer fully funded training in the following areas –
CSCS test and card – this includes is the CITB Health Safety and Environment test for either operatives, specialists and managers and professionals. Funding fully covers the cost of the test, card and the card application service. Note – for CSCS green labourers cards, a H&S qualification is also required, see the CSCS Essentials course group for more details.
REHIS Elementary Health and Safety – this is a one day course that provides an introduction to a wide variety of health and safety aspects. Valuable to anyone working within a business, small businesses owners, office managers, etc.
CSCS Essentials – this is a combination of courses that is required to apply for the CSCS labourers green card and includes the one day REHIS Elementary Health and Safety qualification, the CSCS test, card and card application.
The following courses will be added very shortly –
Qualsafe Emergency First aid at work – this accredited one day course teaches the essentials of first aid that may be required within the workplace in an emergency setting.
Qualsafe First aid at work - this accredited three day course teaches the first aid for the workplace in more detail and is often sought by higher risk industries and settings. Please note, this course costs £250 +VAT therefore a £50 VAT fee is required to be paid by the candidate.
Unsure what you need? Give the team a call on 01592 724797 or read more about these courses on our website.
The CITB Skills and Training fund enables medium-sized construction companies, with up to 250 directly-employed staff, to improve their training programmes. The fund helps employers meet the more complex needs of their developing business. There are many different types of training eligible for funding, including health and safety courses, plant and access equipment qualifications, and management and leadership training, the full list of grant eligible courses can be found on the CITB website.
Small and Micro Businesses
You can apply for the CITB Skills and Training fund if:
- you are a CITB-registered employer
- you have 1-99 directly employed staff on the payroll (employees must be in addition to yourself / business owner)
- any previous project paid for by the Skills and Training fund has been signed off as complete.
How much can you apply for
CITB-registered employers can apply for funding related to how many direct employees they have:
- Employers with 1 to 49 directly employed staff can receive up to £5000.
- Employers with 50 to 74 directly employed staff can receive up to £7500.
- Employers with 75 to 99 directly employed staff can receive up to £10000.
You can apply for funding once every 12 months. If you are not a CITB-registered employer, find out if you are eligible and complete the online application via the CITB website.
Medium Sized Businesses
You can apply for the CITB Skills and Training fund if:
- you are a CITB-registered employer
- you have between 100 and 250 directly-employed staff on the payroll
- any previous project paid for by the Skills and Training fund has been signed off as complete.
How much can you apply for
CITB-registered employers can apply for funding related to how many direct employees they have.
- between 100 and 149 directly-employed staff can receive up to £15,000.
- between 150 and 199 directly-employed staff can receive up to £20,000.
- between 200 and 250 directly-employed staff can receive up to £25,000.
You can apply for funding once every 12 months. If you are not a CITB-registered employer, find out if you are eligible and complete the online application via the CITB website.
Applying for the CITB Skills and Training Fund
Companies can apply on an annual basis to reflect their training needs. The application will be considered in line with CITB’s key objectives and there is a window of opportunity at the end of each month. Typically, CITB provide response the middle of the following month. Businesses will then typically receive part of the cost upfront for each eligible course, receiving the remaining grant payments on completion of training. This allows companies to invest in training, with financial support from CITB.
It’s important to note that only training that has not been booked or delivered can be included in the application.
How can Raeburn Training help?
Applying for the CITB Skills and Training fund is often an intensive, time consuming job for organisations. By utilising our expertise, we take on the time and effort required with minimal input from the customer. at key stages of the process to ensure we are meeting requirements. We offer a free consultation, thereafter, we charge a 10% consultancy fee based on the funding awarded to the customer.
We offer a free consultation, thereafter, we charge a 10% consultancy fee based on the funding awarded to the customer. For more information please email our Client Services Manager, Jen Hancock - [email protected].
















