Course Outline
Core Concepts, Social Engineering, and the Work Environment
Essential Cybersecurity for Employees
-
Understanding threats: Defining cybersecurity and explaining why every employee plays a critical role.
-
Digital hygiene and credential management: Crafting robust passwords, utilizing password managers, and enforcing unique credentials per service.
-
Clear desk and clear screen protocols: Maintaining physical information security within office spaces.
Phishing and Social Engineering – Spotting Threats
-
The psychology behind attacks: Exploring social engineering and why cybercriminals exploit urgency, fear, or authority (e.g., CEO Fraud, BEC).
-
Deconstructing phishing: Techniques for analyzing message headers, obscured links, and malicious attachments (using authentic case examples).
-
Alternative attack vectors: Recognizing vishing (voice phishing) and smishing (SMS phishing).
Securing Remote and Mobile Work
-
Network security: Understanding the risks of public Wi-Fi (in cafes or transit) and correctly implementing VPNs.
-
Device safeguards: Utilizing disk encryption, screen locks, and avoiding unauthorized USB drives.
-
BYOD policy: Guidelines for using personal smartphones for business and maintaining data separation.
Tools, Regulations, and Incident Response
Cybersecurity within the Microsoft 365 Ecosystem
-
Authentication and verification: Practical use of Multi-Factor Authentication (MFA/2FA) for secure account access.
-
Safe data sharing: Managing permissions in OneDrive and SharePoint to prevent unintended "anyone with the link" access.
-
Secure collaboration: Best practices for using Microsoft Teams, including managing external guests and shared files.
Personal Data Protection and GDPR Application
-
Data classification: Distinguishing between public, confidential, sensitive, and personal information.
-
GDPR in daily operations: Avoiding common pitfalls that lead to data breaches, such as misdirected emails or improper BCC usage.
-
Data lifecycle management: Protocols for secure third-party transfers and permanent document deletion.
Managing Security Incidents
-
Recognizing incidents: Identifying breaches such as lost devices, ransomware infections, or accidental phishing link clicks.
-
Escalation procedures: Determining who to notify and the required timelines (roles of IT Helpdesk, Security Officer, and DPO).
-
Immediate response principles: Isolating affected devices, maintaining composure, and prohibiting unauthorized troubleshooting or evidence removal.
Requirements
-
Foundational proficiency with computers and web browsers.
-
Routine engagement with standard office workflows, including email, messaging platforms, and document management.
-
No specialized IT background is necessary, as all technical concepts are presented through the perspective of business impact and everyday operations.
Target Audience
- Office, administrative, and mid-level management personnel across all departments.
- Especially beneficial for hybrid and fully remote team members.
- Regular users of the Microsoft 365 ecosystem.
Testimonials (3)
Experience sharing, it's teacher's know-how and valuable.
Carey Fan - Logitech
Course - C/C++ Secure Coding
get to understand more about the product and some key differences between RHDS and open source OpenLDAP.
Jackie Xie - Westpac Banking Corporation
Course - 389 Directory Server for Administrators
the knowledge of the trainer was very high - he knew what he was talking about, and knew the answers to our questions
