E-learning

In 2024, around 50% of UK businesses experienced some form of cyber attack, with the overall estimated annual cost reaching £27 billion due to lost income, disruption to operations, and theft of intellectual property.

In addition, organisations face potential financial penalties under the General Data Protection Regulation (GDPR), which requires businesses to actively manage risks and safeguard personal data.

This training includes practical activities and real-life scenarios to help learners understand common cyber threats. It equips participants with the skills and knowledge needed to reduce risk and protect organisational data.

At the end of the course, learners must complete a 10-question multiple-choice assessment. A score of 80% or higher is required to pass.

• Lowers the risk of cyber incidents by teaching staff how to recognise and respond to threats
• Supports GDPR compliance through improved handling of sensitive data
• NCSC accreditation ensures the training meets recognised high standards
• SCORM-compliant and compatible with most learning management systems
• Flexible, self-paced online learning
• Interactive content keeps learners engaged
• Built-in quizzes to test understanding
• End-of-section summaries reinforce key points

Upon successful completion, participants will receive a downloadable certificate in PDF format via the SHINE learning platform.

By the end of the course, learners will be able to:

• Recognise various types of cyber attacks and understand their financial, legal, and reputational impact
• Understand both personal and organisational responsibilities for data protection
• Identify warning signs of cyber threats and know when and how to report them
• Apply practical measures to reduce risk, including creating strong, secure passwords

1. Understanding Cyber Attacks

An introduction to what cyber attacks are and the potential financial, legal, and reputational damage they can cause.

Explains who is responsible for protecting an organisation’s systems and data.

Covers the legal implications organisations may face if they fail to properly safeguard personal information.

2. Common Types of Cyber Attacks

An overview of the various forms of cyber attacks and the reasons why attackers carry them out.

3. Social Engineering

Explores how social engineering works, including how criminals gather personal information and exploit it.

Provides guidance on managing your digital footprint to reduce risk.

Examines six common methods used by attackers, supported by real-life examples: phishing, spear phishing, whaling, vishing, smishing, and social media scams.

4. Tailgating

Defines tailgating and highlights how it can pose a security risk.

Offers practical advice on staying alert and steps to take if suspicious behaviour is noticed.

5. Shoulder Surfing

Explains how shoulder surfing occurs and outlines simple actions to minimise the risk.

6. Pretexting

Describes pretexting and how it is used to gain access to sensitive information.

Identifies warning signs that may indicate this type of attack.

7. Payment Diversion & Business Email Compromise

Explains how payment diversion fraud (PDF) and business email compromise (BEC) impact organisations and their customers.

Describes how attackers gather intelligence on businesses and impersonate senior staff.

Highlights how these scams are carried out and how to spot potential warning signs.

8. Account Compromise

Focuses on attacks that target high-level or administrative accounts.

Explains indicators of compromise and the actions to take if an account is suspected to be at risk.

9. Password Security

Emphasises the risks linked to weak passwords and poor security practices.

Provides guidance on creating strong, secure passwords.

Explains how multi-factor authentication (MFA) and two-factor authentication (2FA) enhance protection.

10. Encryption

Outlines how encryption helps protect sensitive files.

Explains why using encrypted passwords and data adds an extra layer of security.

11. Device and System Protection

Covers ways to secure laptops, tablets, and mobile devices from both physical and remote threats.

Includes best practice tips for preventing unauthorised access, whether in person or via network connections.

12. Extortion and Data Theft

Explains what malware and ransomware are, how they spread, and the damage they can cause.

Outlines the ways attackers use these methods to access systems and extract data.

Provides advice on how to reduce the risk of infection.

13. Reporting Security Incidents

Highlights that many data breaches result from human error.

Stresses the importance of promptly reporting incidents and potential threats.

Encourages organisations to foster a culture where employees feel confident reporting concerns without hesitation.

Why is cyber security training necessary if we already have secure systems?
Even when robust security technology is in place, people remain one of the biggest risk factors. Employees can unknowingly expose systems to threats such as phishing or social engineering scams that software alone may not detect. Training helps staff recognise and respond to these risks effectively.

We’re a small business—are we still at risk?
Yes. Cybercriminals often target smaller organisations because they may have fewer security measures compared to larger businesses. This makes them attractive opportunities for attackers. Training can play a key role in strengthening your overall defence.

Is this training suitable for non-technical staff?
Yes, it is designed for all employees, regardless of their technical background. The course focuses on practical, easy-to-understand knowledge that anyone who uses company systems or handles data can apply.

Does the course include GDPR guidance?
Yes, the training covers key aspects of GDPR, helping employees understand how to handle personal data responsibly and reduce the risk of costly compliance breaches.

What support is available during the course?
Comprehensive technical support is provided to ensure everything runs smoothly, whether the course is delivered through the SHINE platform or integrated into your own LMS. Customer support is also available for any course-related queries.

What if a participant does not pass the assessment?
Learners who do not achieve a pass mark can revisit the course content and attempt the assessment again. The course includes interactive features and knowledge checks to support understanding throughout.

Can this training really help prevent cyber-attacks?
Yes. Employees are often the first line of defence. By improving awareness and teaching practical prevention techniques, the training significantly reduces the chances of successful attacks.

Can cyber security be left to the IT department?
No. While IT teams play an important role, protecting data is a shared responsibility. Many cyber incidents begin with simple mistakes, such as clicking on malicious links. Training ensures all employees remain alert and informed.

How often should employees complete this training?
It is recommended that employees refresh their cyber security knowledge at least once a year to keep up with new and evolving threats.

Do you offer training for managers?
Yes, there is a separate course tailored for managers and those with greater responsibility for data protection. It includes more advanced topics such as incident management and security strategy.

Are discounts available for larger teams?
Yes, discounted rates are available for organisations training multiple employees. Pricing can be adjusted based on the size of your team.

How quickly can the course be implemented?
The training can be accessed immediately after purchase via the SHINE platform or deployed through your existing LMS, allowing employees to get started without delay.

Can progress be tracked?
Yes, the SHINE platform allows you to monitor learner progress, check completion status, and download certificates for compliance purposes.

This training is suitable for all employees who use IT systems, regardless of their level of experience. It is especially useful as part of onboarding for new staff.

To maintain awareness and stay up to date with evolving threats, employees should complete cyber security training at least once a year.