Cybersecurity Awareness for Employees

Programme Summary

Employees play a practical role in protecting business information by recognising suspicious requests and following secure working habits. This programme explains common phishing and social engineering scenarios, account protection, device security and incident reporting in accessible language. Participants practise decisions using realistic messages and workplace situations, including when to verify a request independently and when to escalate without attempting unauthorised investigation.

Training Objectives

1 Build awareness of common workplace cybersecurity threats; 2 Strengthen recognition and reporting of suspicious requests; 3 Promote secure account device and information handling; 4 Develop confidence in appropriate incident escalation decisions; 5 Encourage consistent application of organisational security procedures.

Learning Outcomes

1 Identify suspicious indicators in supplied workplace messages; 2 Choose independent verification for unusual payment requests; 3 Select secure account and device protection actions; 4 Classify information sharing scenarios against supplied policy; 5 Complete an incident report with essential factual details.

Target Audience

Administrative Employees; Finance Assistants; HR Officers; Sales Staff; Customer Service Agents; Operational Supervisors.

Target Industries

Professional Services; Retail; Manufacturing; Healthcare Administration; Education; Logistics.

Course Contents

• Module 1 Cybersecurity in Everyday Work: Business information and common threat methods; Employee responsibilities and security policy boundaries; Consequences of mistakes and early reporting value.
• Module 2 Phishing and Social Engineering: Suspicious emails messages calls and links; Impersonation urgency and unusual payment requests; Independent verification through trusted contact channels.
• Module 3 Accounts and Device Protection: Unique passwords password managers and passkeys; Multifactor authentication and unexpected approval prompts; Updates screen locking and approved software.
• Module 4 Safe Information Handling: Data classification and authorised sharing channels; Remote work public networks and removable media; Checking recipients permissions and sensitive attachments.
• Module 5 Reporting and Scenario Practice: Recognising possible incidents and reporting promptly; Preserving useful facts without unauthorised investigation; Applying the supplied incident escalation procedure.

Assessment

• 20 single best answer questions, including applied scenarios; one mark per question.
• 30 minute invigilated digital examination with identity verification. Approved accessibility adjustments preserve the assessed competence.
• Closed book; calculator permitted where relevant. Internet and AI assistance prohibited.
• Individual applied assessment (20 minutes): Review a set of fictional messages and workplace scenarios. Identify suspicious indicators, choose safe next actions and complete a short incident report describing the event, affected device or account and appropriate reporting route.
• Assessment criteria: Accuracy of threat recognition and verification choices; Appropriateness of account and information protection actions; Completeness and timeliness of incident reporting decisions.
• Pass each component separately: 15/20 written marks (75%) and at least 70% on the applied task.
• All mandatory criteria must pass: Do not disclose passwords or approve an unexpected authentication request in the scenario.
• Individual results and feedback are provided. One reassessment may follow coaching under the published enrolment terms.

Certification

• Successful learners receive a TQCSI Arabia digital Certificate of Successful Completion.
• The certificate records the learner name, exact programme title, teaching hours, completion date and unique verification reference.
• Verified identity, full attendance and separate written and applied passes are required; all mandatory critical criteria must be met.
• Proposed issue target: within 30 calendar days of approved results and settlement of applicable fees.
• Records assessed employee cybersecurity awareness; it does not qualify the learner as a security administrator or incident response specialist.
• Attendance confirmation may record completed hours for unsuccessful learners; it does not certify successful completion.

Programme Profile

Number of daysNumber of daysNumber of days

111

Total teaching hoursTotal teaching hoursTotal teaching hours

6 hours; breaks, pre course work and formal final assessments excluded.6 hours; breaks, pre course work and formal final assessments excluded.6 hours; breaks, pre course work and formal final assessments excluded.

Delegates allowedDelegates allowedDelegates allowed

Maximum 20 delegates.Maximum 20 delegates.Maximum 20 delegates.

Training prerequisitesTraining prerequisitesTraining prerequisites

No technical prerequisites. Participants should use workplace email, devices or business applications and be able to follow the supplied reporting instructions.No technical prerequisites. Participants should use workplace email, devices or business applications and be able to follow the supplied reporting instructions.No technical prerequisites. Participants should use workplace email, devices or business applications and be able to follow the supplied reporting instructions.

Pre course assignment and assessmentPre course assignment and assessmentPre course assignment and assessment

Complete a 20 minute awareness diagnostic using fictional emails and review the organisation’s supplied incident reporting contact details.Complete a 20 minute awareness diagnostic using fictional emails and review the organisation’s supplied incident reporting contact details.Complete a 20 minute awareness diagnostic using fictional emails and review the organisation’s supplied incident reporting contact details.

End of course assessmentEnd of course assessmentEnd of course assessment

20 question written exam (30 minutes) and individual applied task (20 minutes).20 question written exam (30 minutes) and individual applied task (20 minutes).20 question written exam (30 minutes) and individual applied task (20 minutes).

Passing criteriaPassing criteriaPassing criteria

75% written and 70% applied, passed separately; full attendance. All mandatory criteria must pass.75% written and 70% applied, passed separately; full attendance. All mandatory criteria must pass.75% written and 70% applied, passed separately; full attendance. All mandatory criteria must pass.