The main idea of the cyber hygiene basics training course for non-technical specialists is that cyber hygiene is not only a set of rules, but also a security culture that recognises that people are an important link in protecting against cyber threats. Therefore, it is necessary to develop the user's understanding of potential dangers (on the Internet, in incoming calls, etc.) and the ability to identify and avoid them, understanding the importance of maintaining technical protection tools such as antivirus software and software updates, etc. Accordingly, this training combines such topics as cyber hygiene in the enterprise and personal cyber hygiene.
The course will be useful for teaching cyber hygiene to company personnel the basics of cyber hygiene in the work environment, to increase the awareness and responsibility of specialists for digital security. The course will help professionals understand the basic concepts of cybersecurity: what they may encounter, what problems may arise, and how to prevent or solve them. Cybersecurity training for non-IT professionals can be delivered in a corporate format, in which case the course programme will be adapted to the needs and internal policies of the company. Such training is organised for a group of at least 10 participants. At the request of the Customer, the participants will take a final test after completing the training to verify the acquired knowledge.
After completing this course, students will be able to:
- Cybersecurity and information protection: Participants will learn about the basic principles and methods of protecting their personal data and confidential information online.
- Basics of cyber hygiene: The course will cover the principles of security in the digital environment, teaching effective strategies and techniques to avoid threats and attacks.
- Cyber hygiene as the basis of cybersecurity: Participants will understand how to practice healthy digital habits as a key to resilience against cyber threats.
- User security: The course will cover the most common fraudulent schemes, phishing attacks and other threats so that users can easily recognise and avoid them.
- Information security basics: Participants will gain knowledge of the principles of information security at various levels, including work and personal spaces.
- Basic safety rules in the digital environment: The course will provide specific tips and rules for working safely online and in the workplace.
Audience Profile
The course is designed for all users who work daily with digital services, data, and online tools and want to learn how to protect themselves and their company from modern cyber threats.
It will be useful for:
- all company employees regardless of position or technical background – since most cyber incidents begin with actions of an ordinary user: clicking a malicious link, opening a suspicious file, using a weak password, or careless handling of data;
- office and remote employees who use corporate email, messengers, cloud services, smartphones, and work devices;
- managers and business owners – to understand key risks, build a security culture within the company, and monitor the team’s level of digital maturity;
- those responsible for internal information security policies and rules – to create realistic recommendations for employees based on real attack scenarios;
- new employees of companies as part of onboarding and basic cybersecurity training;
- all users for personal digital security – protection of their own accounts, personal data, smartphones, home networks, and online activity.
This course is designed to build daily cyber hygiene habits, where security is seen not only as a technical task of the IT department, but as the responsibility of every user.
Before attending this course, students must have:
- Basic computer and internet skills
1. Digital security in everyday life
- What personal cyber hygiene is and why it is needed for every user, especially in a corporate environment.
- Typical threats: phishing, fraudulent messages, account breaches, data leaks, malicious applications.
- How ordinary users are targeted: via email, messengers, social networks, QR codes, public Wi-Fi.
- Zero Trust for users: the principle “do not trust automatically – verify”.
- Checking websites, messages, files, QR codes, calls, and online services before taking action.
- Daily habits of safe online behavior.
- AI as a threat and AI as a tool for improving security.
2. Passwords, accounts, and multi-factor authentication
- How to create strong passwords and passphrases.
- Why password reuse is one of the main causes of account compromise.
- Password managers: why they are needed and how to use them safely.
- Multi-factor authentication: SMS, application, push confirmation, hardware keys.
- Choosing MFA devices and security keys using the Yubico YubiKey product line as an example.
- How to check and strengthen account security for Google, Apple, Microsoft, Facebook, Instagram, and messaging apps.
3. Phishing, social engineering, and online fraud
- How to recognize phishing emails, messages, and websites.
- Fake login pages, “support services”, fake deliveries, banking notifications.
- Safe handling of links, attachments, QR codes, and files.
- What to verify before making payments, transfers, or entering personal data.
- Practice: analysis of suspicious message examples.
4. Protection of computers, smartphones, and home networks
- Operating system, browser, and software updates as a basic layer of protection.
- Signs of device infection or suspicious activity.
- Antivirus and built-in security tools in Windows, macOS, Android, and iOS.
- Safe application installation and permission control.
- Smartphone protection: PIN, biometrics, encryption, backups, find and remote lock.
- Notification security.
- Basic security of home Wi-Fi and public networks.
5. Personal data, privacy, and digital footprint
- What personal data we leave on the internet.
- Privacy settings in social networks and messaging apps.
- Safe storage of documents, photos, files, and backups.
- How to reduce your digital footprint without losing convenience.
- How to act in case of personal data leaks or suspected fraud.
6. Cyber incident response: personal response plan
- What to do if an account is hacked.
- What to do if a device is infected or lost.
- How to revoke active sessions, change passwords, check recovery email, and connected devices.
- How to preserve evidence of an incident and where to seek help.
- Mini checklist: “My 10 actions for personal cybersecurity”.
- Final practice: creating a personal cyber hygiene improvement plan.