Essential cybersecurity

Objectives

• recognise, from real examples of emails, SMS and WhatsApp messages, a phishing or social-engineering attempt (fake supplier, CEO fraud, fake Mobile Money request) and follow their company's reporting procedure
• create and manage strong passwords with a password manager, and enable two-factor authentication on their work accounts
• apply data protection rules in daily work: file sharing, mobile devices, business WhatsApp, public networks, and what must never be passed to an AI assistant
• respond to an incident following a five-step plan (isolate, do not erase, notify, document, restore), on the cases of a compromised workstation, a lost device and a fraudulent payment
• identify the new AI-assisted frauds (cloned voice, fake visuals, personalised messages) and apply a rule of verification through a second channel before any action

Audience

All employees, whatever their role or technical level, including management, assistants and field teams equipped with work phones.

Prerequisites

None. Technical requirements: one computer or tablet for every two participants is enough; participants bring their work phone for the configuration workshops; for remote delivery, a stable connection of at least 5 Mbit/s, microphone and camera; the company's password manager, or a demonstration solution provided by Yolea.

Programme

• 40% short inputs, 60% workshops and practical scenarios
• A gallery of real, anonymised fraudulent messages, sorted as a team
• Phishing simulation between the first and the second day, with the written agreement of management, prior information of the participants and a collective debrief that names no individual
• Configuration workshops on the participants' own devices
• Timed incident role-play
• Practical cases inspired by company situations and by security audits
• Materials handed out: a memo of warning signs, a one-page incident procedure, an account configuration guide, a jargon-free glossary
• A personal action plan of three tasks
• Follow-up point at three weeks

Format

In-company or open enrolment (inter-company); in person, synchronous remote or hybrid; 14 hours, 2 days of 7 h, consecutive or one week apart; remotely, 4 sessions of 3 h 30; 8 to 15 participants, 12 at most for open enrolment.

Assessment

Beforehand, a positioning questionnaire. During the course, a check quiz and a practical challenge (sort twenty given messages and run the procedure on a given incident, the result being scored on a grid). At the end, an immediate feedback survey and a named certificate of course completion. At three weeks, a follow-up point and the result of the phishing simulation.

The last exercise is an action plan: three real tasks that you leave ready to equip with tools.