Cybersecurity Awareness

For IT leaders: Most breaches start with a user. A phishing link, a reused password, an unknown installer, or a tailgater at a secure door can undo your technical controls. This course gives your whole workforce a shared baseline for spotting and stopping these threats.

Role fit: This course is built for every user on your network, from new hires to experienced staff. It needs no technical background, so it suits company-wide rollouts, onboarding programs, and annual refreshers. IT Practitioners will find it a useful baseline for coaching non-technical colleagues.

Time investment: About 3.2 hours per learner across six short skills:

• phishing and social engineering
• passwords
• malware
• insider threats
• company policy
• Google 2-Step Verification

Learners can finish it in a few sittings without pulling them off the job for long.

Risk and change management: The course links user behavior to policy. It covers incident reporting procedures, mobile device auto-wipe and remote wipe, and Google-specific 2-Step Verification content. Assign it ahead of a 2-Step Verification rollout so users understand why additional verification is being introduced and what to expect. Note that the 2-Step Verification demos are Google-specific.

Platform support: Training Managers can add the course to Playlists for onboarding or annual awareness cycles. Team Reporting lets you track completion across departments, which helps document participation in your security awareness program.

Most breaches start with one employee making one bad click. This training gives your whole organization, not just the IT team, the habits that stop common attacks before they become help desk tickets, incident reports, or outages.

The course is built on realistic scenarios. Learners study phishing emails, including a fake PayPal "account limited" message, and learn to hover over links before clicking. They watch a live demo of how a few clicks on an unknown-publisher download can install malware. They follow a case study of "Mike," whose reused passwords and plain-text password list expose everything he can access. They also walk through enabling two-factor authentication step by step.

• Fewer successful phishing and malware incidents: Employees learn to treat "don't click" as their first reaction to unexpected attachments, links, and unknown USB drives.
• Stronger account security: Teams learn why reused passwords and common character substitutions fail against dictionary attacks. They also practice enabling Google 2-Step Verification and authenticator apps without locking themselves out.
• Earlier detection of social engineering and physical security risks: Staff learn to recognize tactics like tailgating through secured doors and avoid workarounds that bypass IT-approved controls.
• Faster, more consistent incident response: Employees learn to follow company reporting procedures every time. They also review mobile device safeguards, including security wipe after repeated incorrect passcodes and remote wipe when a device is lost or stolen.

The result is a workforce that can explain, in measurable terms, what it is doing to protect the organization.

Knowledge

• How phishing emails use urgent subject lines and calls to action, and why unexpected links and attachments should be treated with caution
• Common social engineering techniques, including attempts to trick users into installing malware or disclosing information
• Why reused passwords, predictable character substitutions, and plain-text password lists put corporate accounts at risk
• How malware spreads through email attachments, untrusted downloads, bundled software, and unknown flash drives
• How company policy, incident reporting procedures, and consistent reporting help organizations respond to security incidents
• How device security features such as updates, VPN use on unknown Wi-Fi, auto-wipe, and remote wipe help protect organizational data

Ability

• Inspect suspicious emails and default to "don't click" on unexpected links and attachments
• Create stronger passwords and avoid the tracking mistakes that expose every system a user can access
• Recognize install prompts from unknown publishers and decline to run untrusted software
• Identify phishing and social engineering attempts that could lead to malware infection or unwanted information disclosure
• Follow company procedures to report security incidents quickly and consistently
• Apply approved mobile security practices, including keeping devices updated, using a VPN on unknown Wi-Fi, and using auto-wipe or remote wipe features when appropriate