01
Overview
Practical defensive security for staff and small organisations: what attackers do, how incidents start, and the daily habits that stop most of them. Includes incident response rehearsal.
02
Aims of the Course
- Recognise the most common attack methods
- Apply secure practice to accounts and devices
- Respond correctly to a suspected incident
- Understand obligations and reporting duties
03
Course Structure
01
Threat Landscape
- Phishing and social engineering
- Ransomware and malware
- Credential attacks
- Insider and supply chain risk
02
Account Security
- Strong authentication practice
- Password managers
- Multi-factor authentication options
- Access review and offboarding
03
Device and Data Protection
- Updates and patching
- Encryption and secure storage
- Safe remote working
- Backups and recovery testing
04
Recognising and Reporting
- Spotting convincing phishing
- Handling suspicious files and links
- Reporting routes and speed
- Working without blame
05
Incident Response
- First hour actions
- Containment and evidence
- Communication during incident
- Post-incident review
06
Compliance and Culture
- Data protection basics
- Regulatory reporting duties
- Training and phishing simulation
- Personal security plan
04
Learning Outcomes
- 01Identify phishing and social engineering attempts
- 02Configure multi-factor authentication and a password manager
- 03Follow correct first-response steps in an incident
- 04Explain data protection obligations in practice
- 05Produce a personal and team security checklist
05
Assessment
- Phishing identification test
- Incident response simulation
- Security policy assessment
06
Entry Requirements
- Open access
07
Progression and Careers
- Security-aware staff in any sector
- Small business owner
- Route to security operations study