Course Outline
Core Principles, Social Engineering, and the Workplace Context
Essential Cybersecurity for Staff
-
Understanding threats: The definition of cybersecurity and the critical role of every team member.
-
Digital hygiene and credential management: Generating robust passwords, leveraging password managers, and enforcing the "unique password per service" standard.
-
Clear desk and clear screen protocols: Safeguarding physical information within the office premises.
Phishing and Social Engineering – Identifying Threats
-
The psychology behind attacks: Defining social engineering and why cybercriminals exploit urgency, fear, or perceived authority (e.g., CEO Fraud, BEC).
-
Deconstructing phishing: Analyzing message headers, concealed links, and malicious attachments through exercises based on real-world examples.
-
Alternative attack vectors: Exploring vishing (voice phishing) and smishing (SMS phishing).
Safeguarding Remote and Mobile Operations
-
Network safety: The risks of public Wi-Fi networks (cafes, transit) and the correct usage of VPNs.
-
Device security: Implementing disk encryption, screen locks, and avoiding unauthorized USB drives.
-
Bring Your Own Device (BYOD) guidelines: Protocols for using personal smartphones for business and maintaining data separation.
Tools, Compliance, and Incident Management
Cybersecurity within Microsoft 365
-
Authentication and verification: Practical implementation of Multi-Factor Authentication (MFA/2FA) for secure account access.
-
Secure data exchange: Governing file and folder permissions in OneDrive and SharePoint to prevent open "anyone with the link" access.
-
Communication and teamwork: Securing interactions in Microsoft Teams, including inviting external guests and managing shared files.
Data Privacy and GDPR Application
-
Information categorization: Differentiating between public, confidential, sensitive, and personal data.
-
GDPR in daily workflows: Preventing common errors that lead to data breaches (such as misdirected e-mails or neglecting BCC usage).
-
Data lifecycle management: Protocols for securely transferring information to third parties and permanently disposing of documents.
Managing Security Incidents
-
Breach recognition: Defining what constitutes a security event (lost devices, ransomware, accidental phishing clicks).
-
Escalation paths: Identifying the correct contacts and timeframes (involving IT Helpdesk, Security Plenipotentiary, and Data Protection Officer).
-
Immediate response guidelines: Isolating the device from the network, maintaining composure, and strictly avoiding unauthorized repairs or evidence tampering.
Requirements
-
Proficiency in basic computer operations and web browsing.
-
Routine engagement with standard office workflows, such as e-mail, messaging platforms, and document management.
-
No specialized IT expertise is necessary; all technical concepts are framed through business value and daily operational contexts.
Target Audience
- Staff across all office and administrative functions, including mid-level leadership, irrespective of their department.
- Especially beneficial for those working in hybrid or fully remote configurations.
- Regular users of the Microsoft 365 ecosystem.
Testimonials (3)
Experience sharing, it's teacher's know-how and valuable.
Carey Fan - Logitech
Course - C/C++ Secure Coding
get to understand more about the product and some key differences between RHDS and open source OpenLDAP.
Jackie Xie - Westpac Banking Corporation
Course - 389 Directory Server for Administrators
the knowledge of the trainer was very high - he knew what he was talking about, and knew the answers to our questions
