CACB-YN: Cybersecurity Awareness in Corporate and Business Environments

• Understand Cybersecurity Fundamentals
  • Grasp the importance of cybersecurity in personal and professional contexts.
  • Recognize common threats (e.g., phishing, ransomware) and their real-world impacts.
• Develop Cyber Hygiene Habits
  • Create and manage strong passwords using secure methods (e.g., password managers).
  • Identify unsafe websites, emails, and downloads to avoid malware risks.
• Protect Sensitive Data
  • Learn to handle confidential information responsibly (personal and organizational).
  • Apply privacy settings on social media and other digital platforms.
• Use Technology Safely
  • Follow best practices for securing work devices (laptops, mobiles) and public Wi-Fi.
  • Enable two-factor authentication (2FA) for added account security.
• Respond to Threats Effectively
  • Report suspicious activities (e.g., phishing emails, breaches) to the appropriate teams.
  • Understand basic mitigation steps for attacks like ransomware.
• Participate in Hands-on Learning
  • Engage in simulations (e.g., phishing identification, ransomware scenarios) to reinforce skills.

Outcome: Participants will gain actionable knowledge to reduce vulnerabilities and contribute to a safer digital environment.

Module 1: Introduction to Cybersecurity

• Why cybersecurity is important for everyone.
• Examples of common threats (phishing, scams).

Module 2: Understanding Cyber Threats

• What are cyber threats?
• Malware, phishing, social engineering.
• Real-world examples of breaches caused by negligence.

Module 3: Best Practices for Cyber Hygiene

• Creating and managing strong passwords.
• Recognizing phishing emails and scams.
• Safe internet browsing habits.
• The importance of keeping software updated.

Module 4: Protecting Organizational Data

• What constitutes sensitive data and why it matters.
• Handling confidential information responsibly.

Module 5: Using Work Devices Safely

• Do’s and don’ts for laptops, mobile devices, and email.
• Risks of public Wi-Fi and how to mitigate them.

Module 6: Reporting Incidents

• Steps to take if a breach or suspicious activity is detected.
• The importance of prompt reporting to IT/security teams.

Module 7: Phishing Email Identification Exercise
Purpose: Help participants identify suspicious or potentially phishing emails/messages.
Steps:

• Provide examples of emails (legitimate vs. suspicious).
• Participants identify phishing red flags, such as:
• Informal language or spelling errors.
• Unrelated or suspicious links.
• Requests for personal/financial information.

Activity:

• Participants evaluate sample emails to determine which are phishing attempts.
• Group discussion on actions to take (e.g., avoid clicking links, report to authorities).

Module 8: Strong Password Creation Exercise
Purpose: Educate participants on creating and managing secure passwords.
Steps:

• Explain strong password criteria (length, mix of uppercase, lowercase, numbers, symbols).
• Show examples of weak ("123456") vs. strong ("R#8tM19t#uXw") passwords.

Activity:

• Participants create strong passwords and store them securely.
• Introduce password managers for managing multiple passwords.

Module 9: Identifying Unsafe Websites Exercise
Purpose: Teach participants how to recognize unsafe websites (e.g., malware or fake sites).
Steps:

• Signs of unsafe websites:
• Missing padlock/HTTPS in the URL.
• Unprofessional design (e.g., excessive pop-ups, irrelevant links).

Activity:

• Participants evaluate a list of URLs to determine safety based on taught indicators.

Module 10: Two-Factor Authentication (2FA) Exercise
Purpose: Explain 2FA and its role in securing online accounts.
Steps:

• How 2FA works (e.g., password + code sent to phone/email).

Activity:

• Demo: Enable 2FA on accounts (e.g., Google, Facebook).
• Participants enable 2FA on their accounts (with guidance if needed).

Module 11: Avoiding Malicious Software Exercise
Purpose: Teach participants to avoid downloading harmful/unauthorized software.
Steps:

• Explain malware risks (e.g., via downloads/suspicious links).

Activity:

• Participants distinguish between legitimate and untrustworthy apps / software.
• Teach how to verify reviews / official sources before downloading.

Module 12: Privacy Settings on Social Media Exercise
Purpose: Highlight the importance of privacy on social media.
Steps:

• Risks of oversharing (e.g., address, phone number, personal photos).
• Review privacy settings (e.g., limiting post visibility to friends).

Activity:

• Participants update privacy settings on their social media accounts.
• Discussion on real-world risks of exposed personal data.

Module 13: Reporting Suspicious Activity Exercise
Purpose: Teach participants to report suspicious activity (e.g., hacked accounts, phishing).
Steps:

• How to report phishing emails/suspicious activity on platforms (e.g., Google, banking apps).

Activity:

• Locate and use the "Report" feature on websites/apps.

Module 14: Ransomware Attack Simulation (Theoretical Exercise)
Purpose: Explain ransomware and prevention strategies.
Steps:

• What ransomware is, how it spreads (e.g., emails / downloads), and its impact.
• Prevention: Avoid suspicious emails, back up data, update security software.

Activity:

• Theoretical scenario: Participants outline steps to mitigate/respond to a ransomware attack.