FREE COURSE / SELF-PACED LEARNING

Cyber Security Awareness Fundamentals

Build safer everyday security decisions with this free, self-paced cybersecurity awareness course.

Read the first lesson Explore the curriculum

Read freely. Create an account to save your completed lessons.

Experience level
Beginner
Curriculum
3 modules · 9 lessons
Estimated reading
32 min
Language
English

Reading estimates use lesson text and an allowance for diagrams. Reflection, exercises and optional linked resources take additional time. These are estimates, not measured completion times.

KNOW WHAT YOU’RE WORKING TOWARD

What you’ll learn

  • Explain how attackers turn attention, trust, software, and reused credentials into access.
  • Recognize high-risk moments in messages, websites, downloads, account prompts, and data sharing.
  • Use password managers, strong authentication, safer update routes, backups, and independent verification effectively.
  • Respond constructively after a suspicious click, credential disclosure, malware warning, lost device, or account takeover.

Is this the right course for you?

Who it’s for

Individuals and teams developing everyday cybersecurity awareness.

Scope and boundaries

Security awareness foundations rather than professional incident-response or administration training.

How you’ll learn

Self-paced reading with explanatory diagrams and linked resources. Reflection and optional resource study take additional time.

Before you begin

  • Everyday internet use — You only need experience using a phone or computer, signing into accounts, and reading messages. No security background is assumed.

About this course

A plain-language course for employees, students, families, and curious learners. It explains the mechanics behind phishing, account takeover, unsafe downloads, data exposure, backups, and incident recovery through familiar situations rather than company rules. Each lesson ends with actions a learner can use at home, at work, or while studying.

FOLLOW THE LEARNING PATH

Course curriculum

MODULE 1

Module 1: See the Attack Before It Wins

Begins with everyday digital life, then shows how scams borrow trust and manufacture urgency. Learners practice identifying the exact decision an attacker wants.

  1. Your Ordinary Day Is the Attack SurfaceFollow one normal day and discover where small digital choices become security decisions.4 min reading
  2. How Scams Borrow TrustLearn why familiar logos, real conversation threads, caller ID, and personal details can still accompany a scam.4 min reading
  3. Pause, Leave the Path, and VerifyTurn vague suspicion into a repeatable verification routine that works under urgency.4 min reading

MODULE 2

Module 2: Protect Accounts and Devices

Builds durable account and device habits, then applies them to websites, downloads, extensions, QR codes, networks, and updates.

  1. Passwords, Passkeys, MFA, and RecoveryUnderstand what each sign-in layer protects and how account recovery can quietly become the weakest link.3 min reading
  2. Updates, Apps, and PermissionsLearn what installing software really grants and how to choose safer sources and permissions.3 min reading
  3. Links, QR Codes, Browsers, and Public NetworksNavigate unfamiliar links and public connections without relying on myths about HTTPS or Wi-Fi.4 min reading

MODULE 3

Module 3: Protect Information and Recover

Connects privacy and sharing choices to backup, incident first aid, account recovery, and useful reporting.

  1. Personal Information Has a Long ShadowSee how separate details combine into identity, targeting, and recovery risk.3 min reading
  2. Backups You Can Actually RestoreMove beyond “my files are in the cloud” and design a recovery path you have tested.3 min reading
  3. When Something Goes WrongUse incident first aid for suspicious clicks, stolen credentials, malware, payments, and lost devices.4 min reading

BUILD ON THE RIGHT FOUNDATION

These courses address different scopes. Choose the foundation or follow-on that fits your next question.

Beginner

Social Engineering: Break the Script

Request verification and safe reporting. The technical phishing triage course focuses on investigating message evidence.

6 lessons · 24 min estimated reading

Sources and editorial review

Reviewed by Threat Intelligence Lab

Sources linked in the lessons provide context and further reading. Check the original documentation for current platform behavior and requirements.

Selected references are shown here; the lessons contain the full reading lists.

About this learning content: Courses, lessons, assessments, explanations and illustrations may be created with the help of artificial intelligence. We review and check the material and do our best to avoid incorrect or outdated information, but mistakes, omissions or ambiguous questions may remain. Please verify information before relying on it for professional, security, legal or operational decisions. Read the full notice or report an issue.