Overview
Cybersecurity awareness training course for employees of organizations of all sizes. Targeted at small and medium-sized organizations that may not have a complete training program prepared for use by the organization. This course presents cybersecurity fundamentals for employees of organizations that use information systems and want all users to have basic cybersecurity knowledge and skills.
Syllabus
- Course Welcome (Course 1)
- Welcome to An Employee’s Guide to Cybersecurity. This course is designed to help you understand your role in protecting your organization’s digital information and systems. You’ll explore the fundamentals of cybersecurity, learn how to recognize threats like phishing and malware, and discover practical ways to secure your devices and communications—especially when working remotely. We’ll also cover the importance of cybersecurity policies, legal and regulatory requirements, and how your online behavior can impact your organization. Whether you're new to cybersecurity or need a refresher, this course will equip you with essential knowledge and skills to stay secure and support a safe workplace environment.
- Module 1.1 – Understanding Cybersecurity (Introduction)
- In today's interconnected world, protecting sensitive information is everyone's responsibility. This module introduces the fundamentals of cybersecurity, helping employees understand what cybersecurity is, why it matters, and how everyday actions can make or break an organization’s security posture. Through five focused lessons, you’ll explore core cybersecurity concepts, learn about common threats and attackers, and discover practical ways to safeguard information—from managing passwords to recognizing malware and avoiding costly mistakes. By the end of this module, you'll be equipped with the essential knowledge to play your part in keeping systems secure.
- Module 1.2 – Social Engineering and Cybersecurity
- Social engineering is one of the most effective tools in a cyberattacker’s arsenal, targeting people rather than technology. This module explores how attackers use deception, impersonation, and manipulation—online and in person—to exploit human trust and gain access to sensitive systems and information. You’ll learn to recognize common attack techniques, such as phishing and business email compromise, and develop the skills to respond effectively and protect yourself and your organization.
- Module 1.3 – Introducing Cybersecurity Threats and Attacks
- As remote work becomes more common, so do the cybersecurity risks that come with working outside the traditional office environment. In this module, employees will learn how to recognize and address the unique threats associated with remote work—ranging from insecure networks and devices to phishing, ransomware, and physical security risks. Each lesson provides practical guidance for safeguarding organizational data and personal devices through proper endpoint protection, secure communication, controlled remote access, and awareness of both digital and physical vulnerabilities. By the end of this module, you'll understand the essential security practices that help keep remote work safe, productive, and resilient.
- Module 1.4 – Employee's Role in Cybersecurity
- Cybersecurity is not just the responsibility of IT professionals—every employee plays a vital role in protecting an organization’s information assets and reputation. This module explores how employees contribute to cybersecurity through policy compliance, responsible use of technology, legal awareness, and professional online conduct. By understanding expectations and taking action in everyday situations, employees help safeguard the organization from threats and support a culture of accountability, trust, and resilience.
- Course Conclusion
- Congratulations on completing An Employee’s Guide to Cybersecurity! You've taken an important step in becoming a more informed, proactive, and responsible member of your organization’s cybersecurity mission. By understanding threats, following policies, and adopting secure behaviors—both online and offline—you help protect not only your company’s information but also your coworkers, customers, and community. Remember, cybersecurity is not a one-time task—it’s an ongoing responsibility we all share. Stay curious, stay vigilant, and continue applying what you’ve learned to keep yourself and your organization secure. Thank you for your commitment to building a safer workplace. Well done!
Taught by
Herbert J. Mattord, Ph.D., CISM, CISSP, CDP and Michael Whitman, Ph.D., CISM, CISSP