Spot risks earlier - You will learn to notice common warning signs in everyday work, so you can identify risky situations faster and reduce the chance of making an expensive security mistake.
Assess suspicious messages - You will learn how to check emails and messages for phishing, fake links and impersonation attempts, so you can respond safely instead of acting under pressure.
Protect your accounts better - You will gain practical habits for passwords, password managers and MFA, helping you secure access to both company and personal services more effectively.
Work remotely more safely - You will learn how to protect data outside the office, use Wi-Fi more safely and secure your laptop and phone, so sensitive information is less exposed to loss or leaks.
Resist manipulation more easily - You will recognize social engineering tactics based on urgency, authority and emotions, making it easier to pause, verify a request and avoid rushed decisions.
Share information more securely - You will learn to identify confidential and sensitive data and handle file sharing by email and cloud tools properly, reducing the risk of accidental exposure.
Use AI tools more wisely - You will learn how to use AI without exposing company or confidential data, which mistakes users make most often and how to apply safe prompting practices at work.
Respond to incidents faster - You will follow a clear response path after spotting a threat: what to check first, what to avoid and who to notify, so you can limit damage and act with confidence.
Everyday security incidents often begin with small user errors, haste, or unchecked routine. The section sets the foundation by clarifying the employee’s role as the first line of defense, introducing core terms such as phishing, malware, ransomware, and social engineering, and outlining business and personal consequences.
Phishing, spear-phishing, smishing, and vishing are presented as related fraud techniques built on impersonation and deception. Participants learn to spot spoofing, fake messages, QR-code and attachment traps, common scam scenarios such as CEO fraud or fake invoices, and the safest way to respond.
Attackers often rely less on malware than on human reactions. This section explains how pressure, authority, fear, and emotion are used to obtain information or credentials by phone or in person, and shows how limited trust and verification of unusual requests reduce the chance of manipulation.
Account security starts with eliminating common password mistakes and strengthening the login process. The content includes creating unique passwords, storing credentials safely, using password managers and MFA, recognizing account takeover attempts and fake approval requests, and acting on signs of compromise.
Email, messengers, calls, and videoconferences are treated as channels that require verification and controlled disclosure of information. The section addresses checking senders, domains, links, and attachments, secure transfer of documents, and reducing risks during screen sharing and communication in Teams or similar tools.
Secure use of Microsoft 365 depends on how access is configured and files are shared. Participants review safe login rules, work with OneDrive, SharePoint, and Teams, and learn to manage permissions, avoid risks tied to public links, and protect data during collaboration inside and outside the organization.
Computers, phones, and tablets require both technical safeguards and disciplined everyday use. This part focuses on updates, antivirus software, firewalls, encryption, screen locking, safe installation of applications, use of external media, and the required response when a device is lost or stolen.
Outside the office, routine tasks create different exposure points than in controlled workplace settings. The material addresses public and home Wi-Fi, work in hotels, trains, airports, and other shared spaces, along with protecting conversations, documents, private devices, and hybrid work practices.
Protecting company information depends on proper classification and controlled access. Participants work through handling personal, confidential, sensitive, financial, and commercial data, including secure storage, transfer, and destruction, as well as clean desk, clean screen, and leak prevention practices.
Generative AI introduces specific data-handling and verification risks. The section covers what information must not be entered into public tools, how corporate AI environments differ, how to prepare safer prompts through minimization and anonymization, and why outputs, deepfakes, and manipulated instructions require validation.
Malware and ransomware are examined from the user perspective: how infections start, what malicious files, apps, links, and websites look like, and which device symptoms should raise concern. Attention is also given to limiting infection risk and taking the right first steps after suspicion of compromise.
When a suspicious event occurs, speed and sequence matter. This section explains how to recognize an incident, secure the device and information, report the case under internal procedures, and work with IT or security teams, including responses to leaked data, exposed passwords, and malicious links.
Using realistic examples, participants analyze suspicious emails, SMS messages, and document-sharing methods to identify phishing, social engineering, and weak login practices. The workshop also covers AI-generated content, prompt security, incident simulation, and decision-making in typical risk situations.
At the close of the program, the key rules of safe work are consolidated into a practical user checklist. The discussion highlights frequent mistakes, ways to avoid them, and the core principles for secure use of AI, followed by a Q&A session addressing participant scenarios.
Basic computer skills - You should be comfortable using a computer, email and a web browser, so you can focus on security practices instead of learning the basics of the tools themselves.
Everyday online work - You should have experience using accounts, messengers, documents or cloud tools in daily work, because the training is built around realistic digital work scenarios.
Basic understanding of passwords - You should understand what a login, password and extra access verification are, so it will be easier for you to apply secure sign-in and account protection practices.
Willingness to apply rules - You should be ready to review examples, ask questions and relate the content to your own work, because the training is practical and based on everyday situations.
