Course Outline
Foundations, Social Engineering, and the Work Environment
Cybersecurity Fundamentals for Personnel
-
Overview of threats: Defining cybersecurity and establishing why individual employee compliance is critical for agency resilience.
-
Digital hygiene and credential management: Establishing robust password protocols, deploying credential managers, and enforcing the unique identifier standard for each service.
-
Clear desk and clear screen protocols: Safeguarding physical information assets within the operational workspace.
Phishing and Social Engineering – Identifying Threat Vectors
-
Attack psychology: Understanding social engineering tactics and the exploitation of urgency, fear, or perceived authority (e.g., Business Email Compromise).
-
Phishing analysis: Methodologies for examining email headers, masked hyperlinks, and compromised attachments using verified case studies.
-
Alternative attack vectors: Addressing voice-based social engineering (vishing) and SMS-based fraud (smishing).
Secure Remote and Mobile Operations
-
Network security: Mitigating risks associated with unsecured public Wi-Fi networks and correctly utilizing Virtual Private Networks (VPN) for secure connections.
-
Device safeguarding: Implementing full-disk encryption, enforcing screen locking mechanisms, and prohibiting the use of unauthorized USB peripherals.
-
Personal Device Usage (BYOD): Guidelines for the secure handling of private devices used for official duties and ensuring strict data segregation.
Tools, Regulatory Frameworks, and Incident Response
Cybersecurity within the Microsoft 365 Ecosystem
-
Authentication and verification: Practical application of Multi-Factor Authentication (MFA) to secure account access.
-
Secure data exchange: Managing access controls for OneDrive and SharePoint files to prevent unauthorized external access.
-
Secure collaboration: Best practices for Microsoft Teams, including managing external guest invitations and controlling shared file permissions.
Personal Data Protection and GDPR Compliance in Operations
-
Data classification: Distinguishing between public records, confidential materials, sensitive information, and personally identifiable information (PII).
-
GDPR in daily operations: Preventing common errors that lead to data exposure, such as misdirected communications and improper use of recipient fields.
-
Data handling and disposal: Protocols for secure third-party transfers and compliant destruction of information assets.
Response to Security Incidents
-
Incident identification: Recognizing indicators of compromise, including lost mobile devices, ransomware activity, and successful phishing interactions.
-
Reporting protocols: Defining notification chains and timeframes involving IT Support, Security Officials, and Data Protection Officers.
-
Immediate response standards: Isolating affected devices, maintaining operational calm, and prohibiting unauthorized remediation or evidence destruction.
Requirements
-
Proficiency with basic computer operations and web browsing.
-
Routine engagement with standard office applications (email, messaging, document management).
-
No specialized IT expertise is required; all technical concepts are presented through the perspective of business value and standard operational processes.
Audience
- Office and administrative staff, as well as mid-level management, across all departments.
- Highly recommended for hybrid or fully remote workforce members.
- Regular users of the Microsoft 365 ecosystem.
Testimonials (3)
Experience sharing, it's teacher's know-how and valuable.
Carey Fan - Logitech
Course - C/C++ Secure Coding
get to understand more about the product and some key differences between RHDS and open source OpenLDAP.
Jackie Xie - Westpac Banking Corporation
Course - 389 Directory Server for Administrators
the knowledge of the trainer was very high - he knew what he was talking about, and knew the answers to our questions
