Cybersecurity Awareness: Phishing, Ransomware, Data Protection and Human Risk

INTRODUCTION

Could one hurried click, an unverified payment instruction, or the careless sharing of confidential information expose your entire organisation? Cybercriminals increasingly target employees through convincing emails, WhatsApp messages, QR codes, fake login pages, malicious attachments and impersonation of senior management, customers or suppliers. With artificial intelligence making fraudulent messages, images and voices more believable, employees may find it increasingly difficult to distinguish genuine requests from the carefully designed attacks.

A single mistake can result in stolen passwords, unauthorised payments, ransomware, operational disruption, data breaches and serious reputational damage. Employees may also unintentionally increase exposure by reusing passwords, approving unexpected authentication requests, using unauthorised cloud storage, connecting unknown USB devices or entering company information into public AI tools. When suspicious activity is ignored, concealed or reported too late, a manageable incident can quickly escalate into a major business crisis.

Cybersecurity is therefore no longer the responsibility of the IT department alone. Every employee who uses email, messaging applications, company systems, mobile devices, or confidential information plays an important role in protecting the organisation. This practical one-day programme equips participants to recognise common cyber threats, verify suspicious requests, protect accounts and information, adopt safer digital practices and respond appropriately when an incident occurs.

Through realistic workplace scenarios, phishing challenges, data-handling exercises and incident-response simulations, participants will practise making safer decisions before clicking, downloading, sharing information or acting on unusual instructions. They will leave with a practical behavioural framework of “STOP. VERIFY. PROTECT. REPORT.” that can be applied immediately. The program helps the organisation reduce preventable human errors, strengthen incident reporting and develop a security-conscious culture in which employees become an active line of defence.

LEARNING OUTCOMES

√ Explain how human behaviour and everyday workplace decisions contribute to cybersecurity risks.

√ Recognise phishing, social engineering, digital impersonation and Business Email Compromise attempts.

√ Verify unusual payments, the account information and management requests through trusted channels.

√ Identify unsafe digital behaviours that could expose the organisation to ransomware, malware or account compromise.

√ Apply safer practices for passwords, multi-factor authentication, devices and remote working.

√ Handle personal, confidential and sensitive organisational information responsibly.

√ Recognise data-protection risks involving email, messaging platforms, cloud storage, removable devices and generative AI tools.

√ Take the appropriate immediate action and report as quickly as possible whenever a cyber attack occurred.

WHO SHOULD ATTEND?

This programme is suitable for managers, executives, supervisors and employees from human resources, finance, accounts, payroll, procurement, sales, customer service, administration, logistics, warehouse and operations, as well as anyone who uses email, messaging applications, cloud systems or internet-connected devices and handles customer, employee, supplier or organisational information. No technical cybersecurity or IT background is required.

COURSE BENEFITS

This programme helps organisations reduce cybersecurity exposure caused by human error by strengthening employees’ ability to recognise phishing, impersonation and fraudulent requests, verify sensitive instructions, adopt safer password, device and information-handling practices, and report suspected incidents promptly. It also supports stronger protection of personal and confidential information, faster incident response and the development of a security-conscious workplace culture in which every employee understands their responsibility for protecting the organisation.

TRAINING METHODOLOGY

The programme uses an interactive and practical approach combining facilitated presentations, Malaysian workplace examples, realistic phishing and impersonation samples, group discussions, individual challenges, case studies, knowledge checks and cyber-incident simulations. Participants will practise recognising threats, making safer decisions and applying appropriate response and reporting actions.

TRAINING PREPARATION      

As this programme will be conducted online via Zoom, participants are required to have a laptop or computer with a stable internet connection. Participants should also ensure that their camera, microphone and speakers are functioning properly to support effective participation, discussion and interactive learning activities during the session.

TRAINING DURATION

Full 1 day training (9:00 am – 5:00 pm)

PUBLIC PROGRAM COURSE FEE

Single Registration – RM 1250.00 nett per participant

Group Registration – RM 950.00 nett per participant

(Minimum 4 participants from the same organisation)

(The fee covers training materials, supplementary notes, a detailed training report with assessment and a Certificate of Completion)

IN-HOUSE TRAINING ENQUIRY

For more information regarding our In-House/ Public Program courses, please email us your inquiry at [email protected]
or to speak to our Sales Consultant at + 604- 297 6881 or 011-1289 6881.

For public program schedules, please visit our website: www.progresslink.com.my

Register with us today! Training fees are eligible for claims under the HRD Corp Claimable Courses scheme.

REGISTER ONLINE