Cybersecurity at Work: Stay Safe Online (For Employees)

Identify direct and indirect workplace threats like phishing, smishing, social engineering, malware, ransomware, insider threats, and data leaks, and apply data classifications, secure devices, and approved tools to prevent breaches.

Learn to identify phishing and smishing tactics in emails and texts, spot red flags such as urgency, spoofed domains, and suspicious links, and verify before acting.

Explore social engineering and business email compromise in this lecture, where attackers impersonate leaders and vendors, use phishing and gift card scams, and learn how to verify requests.

Explore how malware and ransomware infiltrate devices, encrypt data, and demand payment, with real-world examples and rules to avoid unknown USBs, links, and unsafe downloads.

Understand how data leaks and email mistakes pose serious security risks, including insider threats and accidental mis-sends, and apply least privilege and careful email checks to prevent them.

Learn how to avoid unapproved downloads and malware by using only IT-approved tools, safeguarding company data, and following data classification policies.

Learn to protect physical spaces and devices by preventing tailgating, safeguarding badges, avoiding unknown removable devices, and locking laptops while using password managers.

Spot insider threats by monitoring unusual patterns and policy violations, recognizing that risk comes from anywhere—from employees to executives—and may involve data theft or leaking sensitive information.

Protect your company by limiting personal and professional social media posts, since attackers use such details for phishing and social engineering; review profiles and consult HR before posting details.

Recognize common workplace threats, phishing, smishing, social engineering, malware, ransomware, insider threats, data leaks, and social media oversharing, and adopt practical security habits for everyday work.

Strengthen defenses with email security, multi-factor authentication, and safe remote work practices. Learn data classifications, password practices, password managers, device security, and threat reporting to protect company data.

Learn practical email best practices to stop phishing threats by pausing before clicking, avoiding credentials or pii via email, and verifying recipients, cc/bcc, and attachments.

Learn how unique passwords and MFA/2FA, plus password managers like LastPass or Bitwarden, protect work accounts from attackers. Avoid writing down passwords or posting them, and never share credentials.

Protect company data by securing devices and avoiding insecure networks, like public wifi; keep work and personal use separate and report lost or damaged devices immediately.

Identify who counts as a vendor, including third parties, contractors, and external partners, and learn to protect credentials, enforce data policies, and verify requests against phishing attempts.

Learn how to classify and label data based on protection needs, distinguish public, internal, confidential, and restricted data, and apply proper access controls to prevent leaks.

Enable VPN at all times, lock your screen when away, separate personal and work data, use secure Wi‑Fi and approved tools, beware phishing, and inform IT when traveling.

Report incidents immediately to IT or cybersecurity, share essential details, and follow a six-step process—stop, contact, provide details, follow directions, update passwords and MFA, reflect to prevent future issues.

Identify the regulations and standards your organization must follow, from hipaa and sox to gdpr, ccpa/cpra, pci dss, glba, fisma, iso 27,001, and nist csf, guided by your grc.

Apply email defenses, verify recipients, and report suspicious messages to IT; enable MFA and Toofar; use VPN, secure passwords, and keep devices and data safe at work and remotely.

Reinforces understanding of workplace security threats such as phishing, smishing, social engineering, malware, ransomware, and insider threats, with guidance to apply MFA, strong passwords, VPN, and data protection habits.