Course Outline
Foundations, Social Engineering, and the Work Environment
Essential Cybersecurity for Employees
-
Understanding threats: Defining cybersecurity and explaining why every employee plays a critical role.
-
Digital hygiene and credential management: Developing strong passwords, utilizing password managers, and adhering to the "one password per service" standard.
-
Clear desk and clear screen protocols: Ensuring physical information security within office spaces.
Phishing and Social Engineering – Recognizing Threats
-
The psychology behind attacks: Understanding social engineering and why cybercriminals leverage urgency, fear, or perceived authority (such as CEO Fraud and BEC).
-
Anatomy of phishing: Analyzing message headers, concealed links, and malicious attachments (supported by exercises using real-world examples).
-
Additional attack vectors: Covering Vishing (voice-based phishing) and Smishing (SMS-based phishing).
Securing Remote and Mobile Work
-
Network security: Explaining the risks of public Wi-Fi networks (e.g., in cafes or trains) and demonstrating correct VPN usage.
-
Device security: Implementing disk encryption, screen locks, and avoiding the use of unknown USB drives.
-
BYOD (Bring Your Own Device) policies: Guidelines for using personal smartphones for business purposes and ensuring data segregation.
Tools, Regulations, and Incident Response
Cybersecurity within the Microsoft 365 Ecosystem
-
Authentication and verification: Practical implementation of Multi-Factor Authentication (MFA/2FA) for secure account access.
-
Secure data collaboration: Managing file and folder permissions in OneDrive and SharePoint (preventing unintended "anyone with the link" access).
-
Communication and teamwork: Safely using Microsoft Teams (managing external guest invites and controlling shared files).
Personal Data Protection and GDPR in Action
-
Data classification: Distinguishing between public, confidential, sensitive, and personal data.
-
GDPR in daily workflows: Identifying common errors that lead to personal data breaches (e.g., misdirected emails, failure to use BCC).
-
Data sharing and disposal: Protocols for securely transferring information to third parties and permanently deleting documents.
Handling Security Incidents
-
Identifying incidents: Recognizing signs of a breach (such as lost phones, ransomware infections, or accidental phishing link clicks).
-
Reporting mechanisms: Determining who to notify and the required timeframes (involving the IT Helpdesk, Security Officer, and Data Protection Officer).
-
Core response principles: Disconnecting devices from the network, maintaining composure, and strictly avoiding DIY fixes or the deletion of evidence.
Requirements
-
Basic proficiency with computers and web browsers.
-
Regular use of a standard office environment (e-mail, messaging applications, and document processing tools).
-
No specialized IT expertise is necessary – all technical concepts are contextualized through business value and everyday workflows.
Target Audience
- All office and administrative staff, as well as mid-level management, across all departments.
- Highly recommended for hybrid or fully remote workers.
- Regular users of the Microsoft 365 ecosystem.
Testimonials (3)
One-on-one interaction for individual tracking during the training. Focus on the direct interests of the participant.
Guillaume FROGER - NOOUS pour Atos/Eviden
Course - 389 Directory Server for Administrators
Machine Translated
Experience sharing, it's teacher's know-how and valuable.
Carey Fan - Logitech
Course - C/C++ Secure Coding
the knowledge of the trainer was very high - he knew what he was talking about, and knew the answers to our questions
