31 Oct Cybersecurity Awareness: Phishing, Ransomware, Data Protection and Human Risk

COURSE OVERVIEW
Could one hurried click, an unverified payment instruction or the careless sharing of confidential information expose your entire organisation? Cybercriminals increasingly target employees through convincing emails, WhatsApp messages, QR codes, fake login pages, malicious attachments and impersonation of senior management, customers or suppliers. With artificial intelligence making fraudulent messages, images and voices more believable, employees may find it increasingly difficult to distinguish a genuine request from a carefully designed attack.

A single mistake can result in stolen passwords, unauthorised payments, ransomware, operational disruption, data breaches and serious reputational damage. Employees may also unintentionally increase exposure by reusing passwords, approving unexpected authentication requests, using unauthorised cloud storage, connecting unknown USB devices or entering company information into public AI tools. When suspicious activity is ignored, concealed or reported too late, a manageable incident can quickly escalate into a major business crisis.

Cybersecurity is therefore no longer the responsibility of the IT department alone. Every employee who uses email, messaging applications, company systems, mobile devices or confidential information plays an important role in protecting the organisation. This practical one-day programme equips participants to recognise common cyber threats, verify suspicious requests, protect accounts and information, adopt safer digital practices and respond appropriately when an incident occurs.

Through realistic workplace scenarios, phishing challenges, data-handling exercises and incident-response simulations, participants will practise making safer decisions before clicking, downloading, sharing information or acting on unusual instructions. They will leave with a practical behavioural framework “STOP. VERIFY. PROTECT. REPORT.” that can be applied immediately. The program helps organisation reduce preventable human errors, strengthen incident reporting and develop a security-conscious culture in which employees become an active line of defence.

LEARNING OUTCOMES
Upon completion of this practical programme, participants will be able to:
1. Explain how human behaviour and everyday workplace decisions contribute to cybersecurity risks.
2. Recognise phishing, social engineering, digital impersonation and Business Email Compromise attempts.
3. Verify unusual payment, account, information and management requests through trusted channels.
4. Identify unsafe digital behaviours that could expose the organisation to ransomware, malware or account compromise.
5. Apply safer practices for passwords, multi-factor authentication, devices and remote working.
6. Handle personal, confidential and sensitive organisational information responsibly.
7. Recognise data-protection risks involving email, messaging platforms, cloud storage, removable devices and generative AI tools.
8. Take appropriate immediate action and report quickly when a possible cyber incident occurs.

COURSE BENEFITS
This programme helps organisations reduce cybersecurity exposure caused by human error by strengthening employees’ ability to recognise phishing, impersonation and fraudulent requests, verify sensitive instructions, adopt safer password, device and information-handling practices, and report suspected incidents promptly. It also supports stronger protection of personal and confidential information, faster incident response and the development of a security-conscious workplace culture in which every employee understands their responsibility for protecting the organisation.

WHO SHOULD ATTEND?
This programme is suitable for managers, executives, supervisors and employees from human resources, finance, accounts, payroll, procurement, sales, customer service, administration, logistics, warehouse and operations, as well as anyone who uses email, messaging applications, cloud systems or internet-connected devices and handles customer, employee, supplier or organisational information. No technical cybersecurity or IT background is required.

TRAINING DURATION
One full day (9:00 am–5:00 pm).

TRAINING METHODOLOGY
The programme uses an interactive and practical approach combining facilitated presentations, Malaysian workplace examples, realistic phishing and impersonation samples, group discussions, individual challenges, case studies, knowledge checks and cyber-incident simulations.

CUSTOMISED IN-HOUSE TRAINING
Every organisation faces different cybersecurity risks depending on its industry, operating environment and employee responsibilities. Progress Link can tailor the training examples and exercises to relevant workplace situations, including phishing messages, management impersonation, suspicious payment instructions and the handling of confidential information. This makes the learning directly relevant to employees’ daily decisions.

MALAYSIAN WORKPLACE RELEVANCE
The training promotes responsible handling of personal and confidential information and introduces data-protection responsibilities relevant to Malaysian workplaces, including awareness of the Personal Data Protection Act 2010 (PDPA), where applicable. This is an awareness programme and does not constitute legal compliance certification.

TRAINING ARRANGEMENTS
This is a one-day in-house programme. Training dates and arrangements are subject to discussion and trainer availability. Please enquire about on-site or live online delivery options.

HRD CORP CLAIMABILITY
This program is eligible for claim under the HRD Corp Claimable Course.

FREQUENTLY ASKED QUESTIONS

1. Do participants need an IT background? No. The programme is designed for non-technical employees across business functions.

2. Can the programme be customised? Yes. Examples and exercises can be adapted to your organisation’s operational risks and participant     profiles.

3. Can we request the full course outline? Yes. A detailed outline is available upon enquiry.

4. How can we arrange this training? Contact Progress Link with your preferred dates, location and expected number of participants.

ENQUIRE ABOUT IN-HOUSE TRAINING
Contact Progress Link for programme details, a customised proposal and a quotation suited to your organisation.
Email: [email protected]
WhatsApp: +60 11 1289 6881