In today's digital world, information security (infosec) is critical to protecting our organisation from risk. This fundamental 30-minute e-learning course provides the essential knowledge you need to safeguard company-specific, sensitive, and confidential information. You will learn the core principles of infosec and your role in preventing data breaches and other security threats.

This course covers the three pillars of information security—Confidentiality, Integrity, and Availability (CIA)—and explores common threats such as cyber-attacks, computer viruses, and malware. Most importantly, you will learn practical, actionable steps to protect our digital fortress, including enforcing strong password policies, understanding data encryption, and following company security measures. The course includes assessments to test your knowledge and ensure you are prepared to defend our data.

Why Is This Course Important?

Our company manages large amounts of important data, making us a potential target for cybercriminals looking to steal information for financial gain or sabotage our systems. Effective information security protects this data from being compromised and ensures our IT systems and applications run securely. By understanding and applying the best practices in this course, you will play a vital role in protecting our company's reputation and assets.

Learning Objectives

Upon successful completion of this course, you will be able to:

• Define information security and its importance for the company.

• Understand the three core components of infosec: Confidentiality, Integrity, and Availability.

• Identify common security threats and risks, including cyber-attacks, viruses, and device intrusion.

• Recognise different types of security, such as network, application, and cloud security.

• Apply best practices to keep company data secure, including data encryption and strong password policies.

• Understand the security measures and policies specific to our organisation.

Course Outline

This training is structured into four key modules:

1. What is Information Security?

• Introduction to Infosec: Learn the definition of information security and why it is a critical practice for protecting company data from all possible risks.

• The CIA Triad: A detailed look at the three fundamental principles of information security:

    ◦ Confidentiality: Ensuring private information is accessed only by authorised individuals.

    ◦ Integrity: Protecting data from unauthorised changes, edits, or deletion.

    ◦ Availability: Making sure data is accessible to authorised users when needed.

2. Security Threats and Risks

• Common Security Risks: An overview of the threats that can compromise our data, including intentional cyber-attacks, computer viruses, spyware, malware, and physical theft.

• Types of Information Security: Understand the different layers of protection used to secure our organisation:

    ◦ Network & Infrastructure Security.

    ◦ Application & Cloud Security.

    ◦ Data Encryption & Cryptography.

3. How to Protect Your Company Data

• Building a Human Firewall: Discover why training employees on security best practices is the first line of defence.

• Practical Security Practices: Learn the key strategies our organisation uses to keep data safe:

    ◦ Implementing a sensitive data handling policy.

    ◦ Enforcing strict password security policies.

    ◦ Using data encryption for information in transit and at rest.

    ◦ Preparing an effective response plan for potential attacks.

4. Security Measures at Our Company

• Our Internal Policies: This section outlines the specific security measures and best practices you are expected to follow as an employee to ensure our collective data is safe.