Course Objective
What this programme helps you achieve
A hands-on 3 hours programme that builds practical, job-ready capability in this area. Delivered through guided walkthroughs, worked examples and reusable checklists you can apply immediately.
UnderstandBuild a clear, structured understanding of the core concepts, terminology and drivers behind this domain.
ApplyTranslate the framework into practical actions, controls and working methods you can use on real engagements.
AssessEvaluate current-state maturity, identify gaps and prioritise the improvements that reduce the most risk.
DeliverProduce the artefacts, evidence and reporting expected of a competent practitioner in this area.
Market Need
Why this matters now
Phishing, Social Engineering and Email Security Awareness addresses a capability that organisations increasingly need but often lack in a structured, defensible form. Teams frequently rely on ad-hoc knowledge, scattered documents or vendor claims instead of a repeatable method.
This programme closes that gap. It gives participants a shared vocabulary, a practical method and a set of reusable artefacts so the organisation can operate this domain consistently rather than reactively.
◆
Framework alignment: Scenario-driven awareness with real phishing examples.
What makes this programme useful
01
Practical Focus
Every module is grounded in real scenarios, walkthroughs and reusable checklists rather than theory alone.
02
Career Relevant
Skills map directly to in-demand roles and to how organisations actually operate this domain.
03
Structured Path
A logical progression from fundamentals to applied practice, with a clear takeaway toolkit.
Key Learning Areas
What participants will learn
How phishing and social engineering actually work
Spotting phishing, spear phishing and BEC
Malicious links, attachments and QR codes
Vishing, smishing and impersonation attacks
Email security signals and verification habits
Real-world attack examples and red flags
Safe response and reporting steps
Building a phishing-resistant culture
3 Hours Agenda
Structured learning flow
09:00–10:15
Module 1 — How phishing and social engineering actually work
Concepts, guided walkthrough and discussion covering how phishing and social engineering actually work.
10:30–11:45
Module 2 — Spotting phishing, spear phishing and BEC
Concepts, guided walkthrough and discussion covering spotting phishing, spear phishing and BEC.
12:00–13:00
Module 3 — Malicious links, attachments and QR codes
Concepts, guided walkthrough and discussion covering malicious links, attachments and QR codes.
14:00–15:15
Module 4 — Vishing, smishing and impersonation attacks
Concepts, guided walkthrough and discussion covering vishing, smishing and impersonation attacks.
15:30–16:30
Module 5 — Email security signals and verification habits
Concepts, guided walkthrough and discussion covering email security signals and verification habits.
16:30–17:00
Module 6 — Real-world attack examples and red flags
Concepts, guided walkthrough and discussion covering real-world attack examples and red flags.
09:00–10:00
Module 7 — Safe response and reporting steps
Concepts, guided walkthrough and discussion covering safe response and reporting steps.
10:15–11:30
Module 8 — Building a phishing-resistant culture
Concepts, guided walkthrough and discussion covering building a phishing-resistant culture.
Audience & Entry Level
Who should attend?
This programme is designed for professionals who work with, or are moving into, this area of cybersecurity, governance or technology.
All EmployeesManagers & Team LeadsHR & AdminExecutives & BoardNew JoinersCustomer-Facing StaffIT SupportAwareness Champions
Recommended prerequisite
A general awareness of information security or IT concepts is helpful. No specific certification is required to attend.
Learning Outcome
What participants should be able to do after the course
- Confidently work with how phishing and social engineering actually work.
- Confidently work with spotting phishing, spear phishing and bec.
- Confidently work with malicious links, attachments and qr codes.
- Confidently work with vishing, smishing and impersonation attacks.
- Confidently work with email security signals and verification habits.