CABP-YN: Cybersecurity Awareness and Best Practices

By the end of this course, participants will:

• Understand the importance of cybersecurity in the workplace and daily life.
• Recognize common cyber threats and attack vectors.
• Learn best practices for protecting personal and organizational data.
• Develop skills to identify phishing attempts, social engineering, and other malicious activities.
• Gain awareness of current cybersecurity trends and real-world attack examples.
• Understand the role of employees in maintaining a secure organizational environment

Module 1: Introduction to Cybersecurity

• What is cybersecurity and why is it important?
• The evolving threat landscape: Why employees are the first line of defense.
• Key cybersecurity terms and concepts (e.g., malware, ransomware, phishing).

Activity:

• Interactive discussion: “What would you do?” (Participants share their experiences with cyber threats).

Module 2: Common Cyber Threats and Attack Vectors

• Phishing attacks: How they work and how to spot them.
• Social engineering: Manipulation techniques used by attackers.
• Malware and ransomware: Examples and impact.
• Password attacks and credential theft.

Real-World Examples:
Case study: The 2021 Colonial Pipeline ransomware attack.

• Example: Phishing emails mimicking trusted organizations (e.g., banks, HR departments).

Activity:

• Phishing email simulation: Participants identify red flags in a sample email.

Module 3: Cybersecurity Best Practices

• Strong password creation and management.
• Multi-factor authentication (MFA) and its importance.
• Safe browsing habits and avoiding malicious websites.
• Securing devices (e.g., laptops, smartphones) and software updates.
• Data protection: Encryption and secure file sharing.

Activity:

• Hands-on exercise: Creating strong passwords and enabling MFA on a sample platform.

Module 4: Current Cybersecurity Trends and Real-World Attacks

• Overview of recent cyberattacks (e.g., supply chain attacks, zero-day exploits).
• The rise of AI-powered attacks and deepfake technology.
• Insider threats and accidental data leaks.

Real-World Examples:

• SolarWinds supply chain attack (2020).
• Deepfake audio used in CEO fraud cases.

Activity:

• Group discussion: How would you respond to a suspected insider threat?

Module 5: Role of Employees in Cybersecurity

• The human factor: Why employees are critical to cybersecurity.
• Reporting incidents: What to do if you suspect a breach or attack.
• Building a culture of security awareness in the workplace.

Activity:

• Scenario-based role-playing: Reporting a phishing attempt to the IT team.

Module 6: Recap, Q&A, and Next Steps

• Recap of key takeaways.
• Open Q&A session for participants.
• Resources for further learning (e.g., cybersecurity blogs, tools, and training).

Activity:

• Quick quiz: Test your knowledge on cybersecurity essentials