Before you start
Practical awareness training for ordinary workplace users.
This is practical awareness training rather than technical training for IT specialists.
It is suitable for employees, managers, volunteers, trustees, temporary staff, new starters, remote workers and anyone using organisational email, devices or cloud services across businesses, charities and non-profits.
Schools and education settings can use our dedicated Education Cyber Security Training. Use Education Cyber Security Training
What the course covers
- phishing and suspicious emails
- links and attachments
- passwords and MFA
- account and device security
- data handling and safe sharing
- social engineering and ransomware
- reporting concerns
- safe browsing, updates and recovery
Useful resources to take back to work
The free PDF and editable Word pack includes incident worksheets, worked examples, a 15-minute team briefing, a 30-minute discussion exercise, facilitator notes and an action plan.
Open the free staff resource packCourse modules and review history
- Recognise everyday attacks
- Small decisions can help prevent larger incidents
- Common ways attacks begin
- Accounts, incidents and recovery
- Know how attackers use ordinary work
- Spot the fake password-expiry message
- Follow a spoofed workplace file link
- Respond well
- Jordan's unusual afternoon
- A sensitive file must reach a project partner
- A device displays a ransom demand
- Build secure habits
- Choose, store and protect passwords well
- Make compromise harder
- Pause before a routine action becomes an incident
- Prepare for disruption, not just prevention
- Five behaviours worth remembering
- Put your learning into practice
- Choose a safe next step
- Take the learning back to work
Maintained by CompTech IT Solutions. Version 2026.10. Reviewed on .
What changed: Added practical staff packs, realistic decision review, optional certificate name and accessible certificate text.
Please note: This is not an external accreditation or NCSC endorsement.
References: NCSC staff training, NCSC password guidance.
What you'll take away
Cyber incidents often start with an everyday decision.
Technology can block many threats, but people still make decisions about emails, links, login prompts, devices and organisational information every day.
This training gives workplace users practical guidance without expecting them to become cyber security specialists.
Recognise suspicious activity
Spot warning signs in emails, messages, login pages and unexpected requests.
Protect accounts
Use stronger account habits and pay attention to unexpected MFA prompts.
Handle information carefully
Pause and verify before sharing, uploading or sending sensitive organisational information.
Report concerns early
Use your organisation’s normal route, even when you are unsure whether something is malicious.
Completion and privacy
A private, browser-local completion record.
Further help
Want help with the wider cyber security picture?
We can help you connect staff awareness with practical protection for accounts, devices, email and organisational information.