Day 1: Recognizing Phishing and Protecting Business Accounts

Phishing and Social Engineering

• Identify legitimate versus deceptive messages
• Pause before answering unexpected requests
• Verify identity before sharing information
• Escalate suspicious communications to specialists

Business Security Passwords and MFA

• Create strong unique account passwords
• Use approved password manager
• Enable MFA on supported services
• Report suspected account compromise immediately

Verifying Sensitive Requests

• Recognize requests requiring independent verification
• Confirm identity through second channel
• Avoid acting on urgency alone
• Escalate unusual financial access requests

Day 2: Sharing Data Safely and Reporting Suspicious Activity

Safe Data Sharing

• Classify information before sharing
• Confirm recipient need and authorization
• Use approved secure sharing channels
• Remove unnecessary sensitive file data

Business Device and Remote Work Security

• Lock devices whenever left unattended
• Apply updates through approved processes
• Use secure connections when remote
• Report lost devices and intrusions

Reporting Suspicious Activity

• Recognize events requiring security reporting
• Document facts without independent investigation
• Use approved reporting channel promptly
• Follow guidance after initial report

• Workplace cases combining phishing and social engineering with competing priorities
• Applied tools used to structure decisions on verifying sensitive requests
• Peer critique of device and remote work security, with attention to implementation risk
• A final applied assignment delivering a reporting flow for suspicious security activity