Description

This course is designed for employees and other individuals who use organisational information systems and require an understanding of social engineering and phishing threats and how to respond appropriately to potential attacks. The course introduces social engineering and the types of sensitive information commonly targeted by attackers. Learners explore common attack methods including baiting, scareware, pretexting, phishing and spear phishing, together with the techniques attackers may use to manipulate individuals into disclosing information or compromising security. Learners develop an understanding of how to recognise suspicious emails, messages and telephone calls, including unusual requests, malicious links or attachments, requests for confidential information and attempts to create urgency or pressure. The course also considers appropriate responses to suspected attacks, personal data breaches and measures such as multi-factor authentication, secure passwords and verification of requests. Overall, the course aims to provide learners with the awareness required to recognise, avoid and report social engineering and phishing attacks and help protect organisational and personal information from compromise.

Topics