Cybercrime and Information Security eLearning

This course provides an introduction to cybercrime, along with broader information security issues. The course contains interactive case studies throughout which highlight the practical steps staff should take to stay safe.

This module and the end assessment can be tailored to incorporate client-specific content.

• Introduction
  • Why is cybercrime and information security important?
  • Recent news stories relating to cybercrime
  • What does it mean for you?
    
    
• Understanding the risks
  • Myths and realities in relation to cybercrime
  • Anatomy of a cyber attack
    • Who commits cybercrime?
    • Key stages of a cyber attack
      
      
• Managing the risks
  • Why is it important to have robust defences (examples of UK and US regulatory action)
  • Defence strategies
    • Defence in depth
    • Zero trust
    • Key elements of a firm’s defences (e.g. least privilege access, procedures/controls, firewalls, encryption)
      
      
• Malware
  • What is malware?
  • Protecting against malware
    • Anti-virus software
    • Staff vigilance
    • Other protections (e.g. software updates, backups, red flags)
      
      
• Passwords
  • Examples of good and bad passwords
  • Common password attacks
  • How do you create a secure password
  • Multi-factor authentication
  • Practical steps to keep passwords secure
    
    
• Electronic communications
  • Common types of attack
    • Phishing
    • Spear phishing and whaling
    • Smishing
    • Vishing/social engineering
      
      
• Hybrid/remote working
  • Common risks when working outside the office
  • Practical advice in relation to:
    • Safe use of WIFI
    • Video conferencing
    • Other information security risks (e.g. travelling, clear desks, information classification)
      
      
• Assessment (10 questions)