Cybersecurity Awareness & Essentials for Workplace Employees & Business Owners
About This Course
Every organisation is a target. Most breaches succeed not because attackers are sophisticated, but because organisations have not identified what they are protecting, what the realistic threats are, and where their internal controls fall short.
This course builds the capability to identify cyber risks and address them through sound internal controls. You will identify and classify the cybersecurity threats and vulnerabilities affecting your organisation, from phishing and ransomware to insider threats and system misconfigurations, and analyse their business impact across confidentiality, integrity, availability, and privacy, including the personal data protection obligations under the PDPA.
You will then apply structured risk assessment frameworks and techniques, likelihood and impact scales, risk matrices, threat modelling, and attack surface analysis, to evaluate exposure, consolidate inputs from across the business, and prioritise risks by business impact. From there the focus moves to treatment through internal controls: selecting preventive, corrective, detective, and compensating internal controls, prioritising them against risk appetite and resources, implementing endorsed control measures, and evaluating the effectiveness of those internal controls and any residual exposure.
By the end of this course, you will be able to identify and assess your organisation's cyber exposure, design and prioritise the internal controls that treat it, and implement and document those internal controls in a defensible, evidence-based way.
What You'll Learn
- Identify and classify cyber threats including phishing, ransomware, insider threats, and supply chain attacks
- Identify cybersecurity threats and vulnerabilities across systems, processes, and data
- Analyse business impact across confidentiality, integrity, availability, and PDPA privacy obligations
- Apply structured risk assessment frameworks and techniques to evaluate severity, likelihood, and impact
- Consolidate risk inputs from multiple business functions and prioritise by business impact
- Select internal controls across preventive, corrective, detective, and compensating types
- Prioritise internal controls against impact, risk appetite, and available resources
- Implement endorsed control measures and document the internal controls plan
- Evaluate the effectiveness of implemented internal controls and identify residual exposure
Entry Requirements
● Minimum age: 18
● Years of working experience: 1
● Possess basic ICT knowledge such as browsing the web, opening of folders and documents, and basic navigation of software interface
● Motivated learners
● Able to interact with fellow peers
● Proficient in spoken English with at least a secondary education qualification or equivalent
● This course is targeted to PMEs (Professionals, Managers, and Executives)