Cybersecurity Awareness for All Staff

Session 1 – Cyber Threats, Phishing and Account Security

• Understanding cybersecurity from an employee perspective
• Why employees are targeted by cybercriminals
• Common threats including malware, ransomware, and credential theft
• Business impact of cybersecurity incidents
• Understanding phishing and social engineering
• Recognizing suspicious sender addresses, links, and attachments
• Identifying urgent, unusual, or fraudulent requests
• Understanding business email compromise
• Recognizing SMS, QR code, and voice-based scams
• Understanding AI-generated phishing and impersonation
• Creating strong passwords
• Risks of password reuse
• Understanding multi-factor authentication
• Recognizing unexpected MFA approval requests
• Practical exercise: identify warning signs in sample phishing messages

Session 2 – Secure Working, Data Protection and Incident Response

• Securing laptops, mobile devices, and workplace accounts
• Importance of software updates and device locking
• Safe use of Wi-Fi and remote-working environments
• Risks associated with unknown USB devices and downloads
• Protecting confidential and sensitive business information
• Safe file sharing and email practices
• Checking recipients before sending sensitive information
• Risks of using unauthorized cloud services and applications
• Responsible use of public generative AI tools with company information
• Recognizing signs of a possible security incident
• What to do after clicking a suspicious link
• What to do after opening a suspicious attachment
• Responding to lost or stolen devices
• Why immediate incident reporting matters
• Scenario exercise: respond to common workplace cybersecurity incidents
• Final review of practical cybersecurity habits employees can apply immediately