Skip to main content

Security Awareness Training

Security Awareness Training is the process of educating employees about the potential risks and impacts associated with cyber incidents. This capability involves understanding and identifying cyber threats, knowing how to prevent them, and how to respond if they occur. The outcome is a safer workplace environment, better protected from cyber threats.

Level 1: Emerging

At a foundational level you are aware of common cyber threats, such as phishing and weak passwords, and understand the basic steps to protect sensitive information. You follow guidance on safe online practices and report anything suspicious to the appropriate contact. By doing this, you help reduce risk and contribute to a safer workplace.

Level 2: Proficient

At a developing level you are starting to recognize common cyber threats and understand basic security practices. You participate in security awareness training and follow standard procedures, asking for guidance when unsure. This helps you avoid simple mistakes and begin contributing to the organization’s safer digital environment.

Level 3: Advanced

At a proficient level you are able to recognize and respond to common cyber threats, such as phishing, social engineering, and suspicious links, without supervision. You understand the importance of ongoing security awareness and encourage safe practices among your team. This helps prevent incidents and builds a stronger culture of cybersecurity in your workplace.

Where is this capability used?