Skip to content
Back to catalog
Sign in
FreeCybersecurityBeginner

Security Awareness Training for Employees

90 min · Beginner · English

Aurimas Cerniakovas Lessons: 22
Register to enroll

Free preview

Watch the first lesson before you decide.

What Counts as a Strong Password?

Try the simulations

Play without an account — nothing is recorded. Enroll to save your results and earn the certificate.

Phishing Email: “Salary Review”

A document from a colleague

~1 min · simulation

Monday morning, and you are still on your first coffee. In your inbox: a notification that a colleague from Accounting has shared a salary review file with you. Curious, aren't you?

Read the email carefully. If you hover your mouse over the link, you can see where it really leads. Decide what to do: report it, delete it or mark it as legitimate. At the end, mark what you found suspicious.

Everything you are about to see is simulated. Never enter a real password — the exercise does not need one and does not record what you type.

Before you start: what is recorded

  • This is a training exercise. Every message you are about to see is simulated. Nothing here is a real email, no real system is affected, and getting it wrong is the point — that is how the training works.
  • No password is ever captured. If a simulated sign-in page asks you for one, what you type stays in your browser and is discarded. Only the number of characters is recorded, so that the exercise knows whether a field was filled in.
  • Your employer sees the results. What is recorded is what you did with each message, how far you went, and a score.
  • Results of simulated phishing emails sent to your work inbox are visible by name to administrators, HR and whoever ran the campaign. Your manager sees them only if they are authorised to run campaigns for your group. Results of these exercises inside the platform are shown only as group totals, and groups of fewer than five people are not shown at all. If your organisation has turned on anonymised results, only totals are visible — no names.
More in the privacy notice (opens in a new tab)

Game: Spot the Scam Message

Spot the scam message

6 messages · simulation

You will see the messages one at a time. Some are scams, others are genuine. Decide what each one is.

  • Swipe left – it is a scam.
  • Swipe right – the message is genuine.

Prefer not to swipe? Use the “Scam” and “Safe” buttons under the card.

To pass, answer at least 70% of the messages correctly.

Sticky Notes: What Can You Trust on a Video Call?

Your manager is on screen. What can you trust?

On a video call, your manager urgently asks you to transfer €18,000 to a new supplier. Drag each note into a column: is it something AI can fake, or something that protects you even from a perfect fake?

Drag each note into a column, or tap a note and then a column. You can move notes between columns before you submit.

0 of 8 placed

Unsorted

Your manager's familiar face on screen

Choose a group

Calling your manager back on a number you know

Choose a group

His voice, intonation and favourite expressions

Choose a group

An agreed code word or security question

Choose a group

The call comes from your manager's Teams account

Choose a group

A second person approves the payment (four-eyes principle)

Choose a group

He knows internal project names and colleagues' names

Choose a group

Stopping when you feel urgency and pressure

Choose a group

Can be faked

Looks convincing, but should not be taken as proof

Drop notes here

Protects even against a perfect fake

Actions the scammer cannot control

Drop notes here

About this course

The complete cybersecurity awareness programme for employees – five modules in one course, one certificate.

Modules: 1. Password security and MFA · 2. Social engineering: phishing, smishing, deepfakes and QR codes · 3. Safe computer use, BYOD and remote work · 4. Data classification, access control and GDPR · 5. Recognising and reporting a cyber incident.

Format: 19 short videos with questions during playback, a realistic phishing simulation, interactive games and knowledge checks. About 90 minutes – take it in one go or module by module. Certificate on completion.

Syllabus

1. Password Security

1What Counts as a Strong Password?Free
2How to Keep Your Passwords Secure
3Two-Factor (Multi-Factor) Authentication

2. Social Engineering

4What Is Social Engineering and Why Is It Dangerous?
5Fraudulent Emails (Phishing)
6Phishing Email: “Salary Review”Free
7Analysing a Phishing Email
8Text Message Scams (Smishing)
9Game: Spot the Scam MessageFree
10Deepfakes – Synthetic Video and Voice Forgery
11Sticky Notes: What Can You Trust on a Video Call?Free
12QR Codes

3. Safe Computer Use

13Using Your Work Computer Safely
14Using Personal Devices at Work (BYOD)
15Remote Work

4. Data Security

16Data Classification
17Access Control – Principle 1: Need to Know
18Access Control – Principle 2: Least Privilege
19Access Control – Principle 3: Separation of Duties
20General Data Protection Regulation (GDPR)

5. Cybersecurity Incident Response

21Quick Guide: What to Do in 5 Common Incidents
22Cybersecurity Incidents – What They Are and How to Respond