Cybersecurity is not only the responsibility of the IT or security team. Every employee who uses email, passwords, mobile devices, business systems or social media can influence an organisation’s security.

This cybersecurity training pathway gives everyday users a practical understanding of the risks they are most likely to encounter and the behaviours that help protect both themselves and their organisation.

The course begins with the fundamentals of information security, then develops into practical guidance on password security, email threats, malware, mobile devices, social media and social engineering.

Designed for organisation-wide rollout, the training helps build stronger security awareness across teams and supports a more resilient security culture.

Who is this course for?

This course is suitable for employees across all departments and levels, including:

• General office and administrative staff
• Customer service teams
• Sales and marketing teams
• Finance and HR teams
• Operations teams
• Managers and team leaders
• Remote and hybrid workers
• Employees who use company devices, email, cloud systems or online services

No technical background is required.

Learning pathway

The course is structured across three levels, allowing learners to build their cybersecurity awareness progressively.

Introduction

Introduces the foundations of information security and the everyday behaviours that help protect organisational information.

Learners cover:

• What information security is
• What drives information security
• Why information security matters
• What information needs to be protected
• Common ways information can be lost or compromised
• Security best practices
• Knowledge assessment

Fundamentals

Builds on the introduction with practical guidance on common cyber risks encountered in everyday work.

Learners cover:

• Password security
• Email security
• Malware
• The impact and cost of security incidents
• Practical security behaviours
• Knowledge assessment

Intermediate

Develops broader awareness of modern workplace security threats and the techniques attackers use to target individuals.

Learners cover:

• Mobile device security
• Social media risks
• Social engineering
• Recognising suspicious behaviour and manipulation techniques
• Safer digital working practices
• Knowledge assessment

Topics covered

The course introduces learners to:

• Information security fundamentals
• Protecting sensitive information
• Security best practices
• Password security
• Email security
• Malware
• Cybersecurity incidents and their impact
• Mobile device security
• Social media risks
• Social engineering
• Human-factor security
• Everyday cyber hygiene

Course at a glance

Format: Self-paced online learning
Level: Introduction, Fundamentals and Intermediate
Audience: Employees across all departments and levels
Certificate: Certificate of completion included
Tracking: Completion tracking available for training and audit records
Learners: 1,000+ learners

Organisations that accept, process, store or transmit payment card data need employees to understand their role in protecting cardholder information.

This PCI DSS training pathway gives learners a practical introduction to payment card security and progressively builds their understanding of how PCI DSS works in practice.

The training begins with essential security awareness and everyday do’s and don’ts, then develops into a broader understanding of PCI DSS scope, merchant responsibilities, compliance levels, implementation, validation and reporting.

Designed for organisational rollout, the course helps businesses provide consistent payment security awareness across relevant teams while supporting wider PCI DSS compliance programmes.

Who is this course for?

This training is suitable for employees and teams involved in payment card handling or PCI DSS compliance, including:

• Retail and hospitality staff
• Finance and payment teams
• Customer service teams
• Operations teams
• IT and security teams
• Compliance and risk teams
• Managers responsible for payment environments
• Employees who handle, process or have access to cardholder data

It is particularly relevant for organisations that accept or process card payments and need to strengthen payment security awareness across their workforce.

Learning pathway

The course is structured across three levels, allowing learners to build their knowledge progressively.

Introduction

A practical introduction to payment card security and the purpose of PCI DSS.

Learners cover:

• What PCI DSS is
• Why PCI DSS is important
• What data PCI DSS is designed to protect
• Essential do’s and don’ts of payment card security
• Knowledge assessment

Fundamentals

Builds on the introduction by explaining how PCI DSS applies to merchants and organisations.

Learners cover:

• The structure of PCI DSS
• The scope of PCI DSS
• PCI compliance levels for merchants
• PCI DSS best practices
• Knowledge assessment

Intermediate

Develops a deeper understanding of PCI DSS implementation and compliance responsibilities.

Learners cover:

• The 12 requirements of PCI DSS
• PCI validation and reporting requirements
• Building a PCI DSS project team
• Practical implementation considerations
• Knowledge assessment

Topics covered

The course introduces learners to:

• Payment card security
• Cardholder data protection
• PCI DSS purpose and structure
• PCI DSS scope
• Merchant compliance levels
• Payment security best practice
• The 12 PCI DSS requirements
• Validation and reporting
• PCI DSS project planning
• Organisational responsibilities

Course at a glance

Format: Self-paced online learning
Level: Introduction, Fundamentals and Intermediate
Audience: Employees and teams involved in card payments and PCI DSS compliance
Certificate: Certificate of completion included
Tracking: Completion tracking available for training and audit records
Learners: 20,000+ learners

Secure software starts with secure development practices.

This course gives developers and technical stakeholders a practical introduction to the vulnerabilities attackers commonly exploit in web applications, including injection attacks, cross-site scripting and cross-site request forgery.

Learners are introduced to the OWASP Top 10 and shown how common application security risks connect directly to everyday development decisions.

Rather than focusing only on theory, the course helps teams understand how vulnerabilities arise, how attackers exploit them, and how secure coding habits can reduce risk throughout the software development lifecycle.

The training is particularly useful for organisations strengthening secure development practices as part of PCI DSS, ISO 27001, application security or wider product security programmes.

Who is this course for?

This course is designed for technical teams involved in building, testing or managing software, including:

• Software developers and engineers
• Web and application developers
• QA and software testing teams
• DevOps and engineering teams
• Technical product owners
• Technical leads and engineering managers
• Application security teams
• Technical stakeholders involved in secure software delivery

What learners will learn

By completing the course, learners will be able to:

• Explain how common web application vulnerabilities are exploited
• Recognise the risks represented within the OWASP Top 10
• Understand how insecure coding decisions can introduce application vulnerabilities
• Identify common injection risks and defensive coding approaches
• Understand how cross-site scripting attacks work and how they can be prevented
• Recognise cross-site request forgery risks and appropriate controls
• Apply stronger secure coding habits in day-to-day development
• Support secure development lifecycle practices within their organisation

Topics covered

• OWASP Top 10
• Application security fundamentals
• Code injection
• Cross-site scripting (XSS)
• Cross-site request forgery (CSRF)
• Common software vulnerabilities
• Defensive coding practices
• Secure software development
• Secure SDLC principles
• Application security responsibilities

Course at a glance

Duration: Approximately 30 minutes
Format: Self-paced online learning
Level: Technical awareness / secure coding fundamentals
Audience: Developers, engineers, QA teams and technical stakeholders
Certificate: Certificate of completion included
Tracking: Completion tracking available for training and audit records
Learners: 450+ learners

Every employee who handles personal data plays a role in protecting it.

GDPR Fundamentals gives employees a clear and practical introduction to data protection without overwhelming them with legal terminology. The course explains what GDPR means in everyday working situations, why the rules matter, and how individual actions can help protect customers, colleagues and the organisation.

By the end of the course, learners will understand the core principles of GDPR, recognise when personal data is being processed, understand the importance of having a lawful basis, recognise individual data rights and know when a potential data breach needs to be escalated.

Designed for organisations that need consistent privacy awareness across their workforce, the course is self-paced, easy to deploy across teams and provides completion tracking to support training and compliance records.

Who is this course for?

Suitable for employees who handle or have access to personal data, including:

• General employees
• Customer service and support teams
• HR and people teams
• Sales and marketing teams
• Operations teams
• Managers and team leaders
• Privacy and compliance champions

It is particularly relevant for organisations processing the personal data of individuals in the EU or EEA.

What learners will learn

By completing the course, learners will be able to:

• Explain the key principles of GDPR in practical terms
• Understand what constitutes personal data and data processing
• Recognise why organisations need an appropriate lawful basis for processing
• Understand the core rights available to data subjects
• Recognise common privacy and data protection risks
• Identify situations that may constitute a personal data breach
• Know when and how a potential privacy issue should be escalated
• Apply safer data-handling behaviours in everyday work

Topics covered

The course introduces learners to:

• GDPR Overview
• Data Processors and data Controllers
• Data Processing
• GDPR Implementation
• Course Test

Course at a glance

Duration: Approximately 30 minutes
Format: Self-paced online learning
Level: Fundamentals / Awareness
Audience: Employees and teams handling personal data
Certificate: Certificate of completion included
Tracking: Completion tracking available for training and audit records
Learners: 8,000+ learners