Course track
All-Staff Core
The mandatory baseline every employee completes: phishing, social engineering, passwords and MFA, mobile scams, AI risks, and data protection basics under NDPA.
Who takes this: Every employee, every role, new hires within their first 30 days
NDPAISOSOC2NISTPCICBNFTC
| Module | Length | What staff learn | Maps to |
|---|---|---|---|
| Welcome & Why Cybersecurity Matters | 3 min | Explain why every employee is a security control and set expectations for the program. | NDPA, ISO, SOC2, NIST |
| Today's Cyber Threat Landscape | 5 min | Name the top 5 threats hitting SMBs and enterprises now, and connect them to real business cost. | ISO, SOC2, NIST |
| Phishing Fundamentals: Spotting the Hook Priority | 6 min | Identify the 5 red flags in a phishing email and know the correct reporting step. | ISO, SOC2, PCI, NIST |
| Social Engineering Tactics Priority | 5 min | Recognize pretexting, baiting, tailgating and urgency manipulation. | ISO, SOC2, NIST |
| Deceptive Calls & Vishing | 4 min | Spot a scam call pattern and verify caller identity before acting. | ISO, SOC2, NIST |
| Safe Browsing & the Digital Landscape | 4 min | Avoid malicious links and downloads, and use HTTPS and browser warnings correctly. | ISO, SOC2, NIST |
| Password Security & MFA Basics Priority | 5 min | Build a strong passphrase, explain why MFA stops most account takeovers, and use a password manager. | ISO, SOC2, PCI, NIST |
| Mobile, SMS & WhatsApp Scams | 4 min | Identify smishing and WhatsApp impersonation scams, and never tap a link from an unknown number. | NDPA, ISO, NIST |
| QR-Code Phishing ("Quishing") | 3 min | Treat a QR code like a link: verify before scanning in public or in email. | ISO, NIST |
| MFA Fatigue & Account Takeover Priority | 4 min | Recognize MFA-bombing and never approve a push notification you did not request. | ISO, SOC2, NIST |
| AI Deepfake & Synthetic Voice/Video Fraud Priority | 6 min | Recognize signs of a cloned voice or deepfake video call and apply a verification callback rule. | ISO, SOC2, CBN, NIST |
| Safe Use of AI Tools at Work Priority | 6 min | Know what data must never go into a public AI chatbot, and use only approved AI tools. | NDPA, ISO, SOC2, NIST |
| Data Protection & Privacy Basics under NDPA | 6 min | Explain lawful processing, data subject rights, and the breach reporting rule. | NDPA, ISO, NIST |
| Incident Reporting: See Something, Say Something | 3 min | Know who to contact and what to report in the first 10 minutes of suspecting an incident. | ISO, SOC2, NIST |
| Physical Security & Clean Desk | 3 min | Lock screens, secure documents, and challenge unbadged visitors. | ISO, SOC2, NIST |
| Social Media Oversharing | 4 min | Avoid posting information attackers can use for pretexting or OSINT. | ISO, NIST |
| Protecting Financial Information Online | 4 min | Safely handle card and bank data, and recognize fake payment portals. | PCI, FTC, ISO |
| Travel Security | 4 min | Secure devices and data on the road, and avoid public charging stations and open Wi-Fi risk. | ISO, NIST |
| Nigeria Spotlight: POS & Bank-Alert Fraud | 4 min | Recognize fake POS alerts and "wrong transfer, please refund" scams. | CBN, NDPA |
| Nigeria Spotlight: SIM-Swap Fraud | 4 min | Recognize signs of a SIM swap in progress and protect the mobile line tied to banking. | CBN, NDPA |
| Nigeria Spotlight: BVN/NIN/OTP Scams Priority | 4 min | Never share a BVN, NIN, or OTP with anyone, including someone claiming to be bank staff. | CBN, NDPA |
| Nigeria Spotlight: Fake Recruitment & Loan-App Scams | 4 min | Spot fraudulent job offers and predatory loan apps that harvest contacts and data. | NDPA |
| Nigeria Spotlight: Impersonation of CBN/EFCC | 3 min | Recognize fake regulator calls or letters demanding payment or account access. | CBN, NDPA |
| US Spotlight: IRS/W-2 and Tax-Season Scams | 4 min | Recognize IRS impersonation and W-2 phishing aimed at payroll and HR. | FTC, NIST |
| Course Wrap-Up & Annual Refresher | 3 min | Summarize the year's key behaviors and preview the annual refresher cadence. | NDPA, ISO, SOC2, NIST |
Compliance codes show which frameworks each module supports. Some clauses are marked "verify" in our source review, meaning we phrase the claim cautiously rather than cite an exact, unconfirmed section number. See the glossary for term definitions.