Security at Work in the Office

The core course for everyone in the office: sign-in and device, inbox, phone and payments, confidential data, the desk itself and the emergency. Followed by phishing training in your own inbox.

The lessons

1. 1
   Why it comes down to you

   Who attacks, why almost every business is affected and why in the end a person at an office desk makes the decision.

2. 2
   How attackers manipulate people · View free preview

   The psychological levers behind phishing, phone calls and visitors at the door, and the one habit that defeats them all.

3. 3
   Passwords, password managers and two-factor authentication

   How to protect your accounts so that a single stolen password can no longer do any damage.

4. 4
   Your work device: updates, software and downloads

   Why updates must not wait, who installs software and which traps lurk in search engines and warning pop-ups.

5. 5
   Why the sender is no proof · View free preview

   How an email reaches you, why senders can be forged and why even a genuine address is not enough.

6. 6
   Recognising phishing: the signs

   Five signs, the BSI's 3-second check and how to read a web address correctly before you click.

7. 7
   Opening attachments, links and images safely

   Which file types are dangerous, why shared documents often lead into a trap and what remotely loaded images give away.

8. 8
   The call-back rule: CEO fraud, invoice fraud, changed bank details

   The most expensive attacks are after a payment or a change of bank details. A single habit prevents them.

9. 9
   Phone, text messages, messengers and Teams

   How the same scams arrive via other channels, why the fake IT helpdesk is so dangerous and what applies to QR codes.

10. 10
    Recognising confidential information and sharing it correctly

    Which information is protected how, why the wrong recipient is the most common data breach and which channels are off-limits.

11. 11
    The physical workplace

    Screen lock, clear desk, printers, document shredding and who follows you through the door.

12. 12
    What you reveal publicly

    How attackers build their next attack from the legal notice, career profiles, photos and out-of-office replies.

13. 13
    Reporting an incident: quickly, briefly, to the right place

    What you do in the first few minutes, whom you inform and when, and why reporting quickly is never a mistake.

14. 14
    Your ten rules and what comes next

    The whole course in ten rules for everyday office life, and what to expect in Part 2, the phishing training.