Foundation · everyone
ISO 27001 Security Awareness for All Staff
A practical awareness course that shows staff what the company’s ISMS means for their daily work: where the policies live, how to spot and report problems, how to protect accounts, devices, data and the workplace, and what to do when something goes wrong. It supports the awareness, competence and communication expectations of ISO/IEC 27001 but does not by itself make an organisation certified or compliant.
8 modules~140 minutesFinal exam: 20 questions · 30 min · pass 80%Valid 12 months
Who it’s for
Every employee, intern and long-term contractor in an organisation that runs, or is building, an information security management system (ISMS) aligned to ISO/IEC 27001:2022. No technical background needed.
After this course, people can
- Explain in plain words what the company’s ISMS is and where to find the security policies that apply to you.
- Recognise phishing, payment fraud and social engineering, and report them through the agreed route.
- Protect your accounts, devices and the information you handle using the company’s approved tools and rules.
- Keep desks, screens, visitors and paper secure in the office, at home and while travelling.
- Know what to do in the first minutes of a suspected security incident and answer simple auditor questions with confidence.
Modules
- ISO 27001 and your part in it12 min
- Data Protection, Privacy and Responsible Handling14 min
- Phishing, Smishing and Social Engineering14 min
- Password Security, MFA and Identity Protection14 min
- Safe Internet, Email and Business Communication13 min
- Mobile Device Security and BYOD14 min
- Clear desk, clear screen, visitors and physical security12 min
- Cybersecurity Incident Response Playbook for Indian Businesses16 min
- Final exam · 20 questions · pass 80%After all modules