Cyber Security Awareness

er Security Awareness helps people who use workplace accounts, devices and information make safer everyday decisions. An unexpected message, a rushed payment request or a lost laptop can become a security problem long before a technical specialist is involved. The course explains these situations in accessible language and keeps the focus on actions within an ordinary employee’s role.

Across eight teaching modules, learners explore common threats, passwords and passkeys, multi-factor authentication, phishing, malware and ransomware. They also consider secure browsing, approved software, remote working and the care needed when sharing personal or confidential information. Practical examples connect the subjects to familiar tasks such as opening attachments, checking recipients and responding to a login prompt.

The learning follows a consistent approach: stop before acting under pressure, check what is being requested, protect accounts and information, report concerns and learn from mistakes. Scenarios help learners distinguish a sensible first response from technical investigation or recovery work that belongs with authorised colleagues.

This course is suitable for employees, contractors and supervisors across office-based, hybrid and other workplaces. It supports induction or refresher training and encourages learners to apply their own organisation’s security policies and reporting routes. No previous cyber security qualification is required.

By the end, learners should be better equipped to notice warning signs, use approved controls and report incidents promptly. A separate final assessment checks understanding of the teaching content. The emphasis is practical workplace awareness, supported by clear role boundaries and a constructive approach to reporting.

By completing this course, learners will be able to:

• Explain the employee’s role in protecting workplace systems and information.

• Identify common phishing, impersonation, malware and ransomware warning signs.

• Choose a safe response to an unexpected authentication prompt or request for credentials.

• Apply approved password and authentication practices to workplace accounts.

• Check a suspicious request using a trusted, independent contact route.

• Describe safer handling of devices and information when working remotely.

• Check recipients, permissions and approved transfer methods before sharing information.

• Recognise when an event needs prompt internal reporting.

• Provide useful factual details without attempting unauthorised investigation.

• Use the stop, check, protect, report and learn approach in a workplace scenario.

Course Content

Module 1 - Understanding Cyber Security and the UK Threat Landscape

Module Learning Outcomes

By the end of this Module, learners will be able to:

• Explain cyber security in plain language and why it matters to day-to-day work.

• Recognise common threats affecting UK organisations, including phishing, impersonation, malware and ransomware.

• Understand confidentiality, integrity and availability as practical security outcomes.

• Recognise that cyber security is a shared responsibility and know when to stop, check and report.

Module 2 - Passwords, Passkeys and Multi-Factor Authentication

Module Learning Outcomes

By the end of this Module, learners will be able to:

• Explain why password reuse creates risk.

• Use strong, unique passwords and password managers where approved.

• Explain the purpose of 2-step verification or multi-factor authentication.

• Understand that passkeys can reduce reliance on passwords and can provide strong phishing-resistant authentication where supported.

Module 3 - Phishing, Scams, Impersonation and Social Engineering

Module Learning Outcomes

By the end of this Module, learners will be able to:

• Recognise common signs of phishing, impersonation, vishing and social engineering.

• Understand how urgency, authority, fear and curiosity can be used to pressure people into unsafe actions.

• Verify unusual requests using a separate trusted channel.

• Report suspicious messages and calls through approved organisational routes.

Module 4 - Malware, Ransomware, Updates and Backups

Module Learning Outcomes

By the end of this Module, learners will be able to:

• Recognise common warning signs that may indicate malware or ransomware.

• Explain why supported software and timely security updates are important.

• Understand the Cyber Essentials 14-day requirement in its correct context.

• Explain why regular, protected and tested backups support recovery.

Module 5 - Secure Devices, Email, Internet and Remote Working

Module Learning Outcomes

By the end of this Module, learners will be able to:

• Use work devices in line with organisational policy.

• Recognise risks linked to lost devices, insecure networks and unauthorised software or media.

• Understand the purpose of VPNs and other secure remote-access controls where required by the organisation.

• Report lost, stolen or compromised devices promptly.

Module 6 - Protecting Data, Access and Information

Module Learning Outcomes

By the end of this Module, learners will be able to:

• Apply need-to-know and least-privilege principles at awareness level.

• Protect personal and confidential information during storage, sharing and disposal.

• Recognise accidental disclosure risks such as sending information to the wrong recipient.

• Understand that staff act on behalf of their organisation and must follow its data-protection and security controls.

Module 7 - Recognising, Reporting and Responding to Cyber Incidents

Module Learning Outcomes

By the end of this Module, learners will be able to:

• Recognise signs that may indicate a cyber security incident or personal data breach.

• Know the importance of immediate internal reporting and escalation.

• Distinguish a general cyber incident from a personal data breach at awareness level.

• Understand that regulatory reporting decisions are normally made by authorised organisational roles.

Module 8 - Building a Cyber-Secure Workplace Culture

Module Learning Outcomes

By the end of this Module, learners will be able to:

• Explain why culture and everyday behaviour matter alongside technical controls.

• Encourage prompt reporting and constructive learning from near misses and incidents.

• Understand the role of regular awareness training and leadership ownership.

• Apply the course-wide STOP - CHECK - PROTECT - REPORT - LEARN model.

What You Need To Do This Course

No previous specialist qualification is required. Learners need sufficient English to follow the teaching and assessment, an internet connection and a suitable device for the online course. Access to the organisation’s relevant policies and reporting contacts will help learners apply the material at work.