Everyday Cyber Security for Every Employee

What's inside

1. Level 1: Why Attackers Target Ordinary StaffFree
   Learners see why criminals target everyday employees rather than IT systems, and how one click, call or reply can lead to a wider breach.
2. Level 2: Recognising Phishing EmailsFree
   Learners spot the warning signs of a phishing email and know how to report it inside the organisation and to the NCSC's Suspicious Email Reporting Service.
3. Level 3: Checking Links, Senders and Attachments
   Learners follow a step-by-step routine to check a sender's real address, where a link really goes and how risky an attachment is before opening anything.
4. Level 4: Smishing, Vishing and AI Impersonation
   Learners recognise scam texts, phone calls and AI-generated voices or messages that pretend to be colleagues, managers, banks or suppliers.
5. Level 5: Invoice and Payment Fraud: Verify Every Request
   Learners apply a verification process to payment requests, changes to bank details and urgent transfer instructions, using a separate trusted channel.
6. Level 6: Strong Passwords and Password Managers
   Learners create strong, unique passwords using the NCSC's three-random-words approach and store them safely in a password manager.
7. Level 7: Passkeys and Multi-Factor Authentication
   Learners understand passkeys, which the NCSC now recommends wherever a service supports them, and two-step verification (2SV) as the fallback where it does not.
8. Level 8: Software Updates and Device Hygiene
   Learners understand why installing updates promptly is one of the most effective defences and how to keep work and personal devices up to date.
9. Level 9: Safe Browsing and Downloads
   Learners browse and download safely by recognising fake websites, malicious adverts, bogus support pop-ups and unofficial software sources.
10. Level 10: Public Wi-Fi, VPNs and Working in Public
    Learners assess the risks of public Wi-Fi and public spaces and use a VPN, mobile hotspot and privacy habits to protect work.
11. Level 11: Lost Devices and Removable Media
    Learners know what to do immediately when a device is lost or stolen and how to handle unknown USB sticks and other removable media.
12. Level 12: Handling Personal Data and UK GDPR Basics
    Learners apply the basics of UK GDPR and data classification to handle personal and confidential information safely day to day.
13. Level 13: Using AI Tools Without Leaking Data
    Learners use AI tools safely by choosing approved services, keeping sensitive data out of prompts and checking outputs, in line with NCSC warnings about unapproved 'shadow AI'.
14. Level 14: Secure Home Working and Social Media Oversharing
    Learners secure their home working setup and limit what they share online, so attackers cannot use it for targeted social engineering.
15. Level 15: Ransomware and First Response
    Learners recognise the signs of ransomware and other active compromises and take the right first steps without making the damage worse.
16. Level 16: Reporting Incidents Quickly and Without Blame
    Learners report security incidents and near misses quickly through the right internal and external channels, with the support of a no-blame culture.
17. Level 17: Final Challenge: Real-World Security Scenarios Exam
    Learners apply everything from the course to a series of realistic mixed scenarios, from first contact by an attacker through to reporting and recovery.

Access

The first 2 levels are free with a free account. Every level, the podcast edition and the AI tutor come with All Access at £4.99/month or any Creator plan — see pricing.

Start free →