Course track
Phishing Defense Essentials
A stand-alone deep dive on phishing: spear phishing, fake login pages and MFA-bypass kits, QR phishing, smishing/vishing, and reporting the right way.
Who takes this: All staff wanting focused phishing training, or a stand-alone entry point for new hires
ISONISTSOC2FTCNDPACBN
| Module | Length | What staff learn | Maps to |
|---|---|---|---|
| Spear Phishing and OSINT | 5 min | Recognize phishing built from public information about you or your company. | ISO, NIST |
| Beyond the Red Flags: Fake Login Pages and MFA-Bypass Kits | 6 min | Verify the real web address before entering credentials, since completing MFA no longer proves a page is genuine. | ISO, NIST |
| QR Phishing in the Real World | 4 min | Treat an unexpected QR code like an unverified link, in person and online. | ISO, NIST |
| Phishing Practice: Four Scenarios, Four Decisions | 5 min | Apply the full phishing checklist across email, SMS, WhatsApp, calls, and QR codes. | ISO, SOC2, NIST |
| How Phishing Actually Works: The Attacker's Playbook | 5 min | Explain the basic mechanics of a phishing attack so you can recognize the pattern before you become a target. | ISO, NIST |
| Smishing and Vishing: When Phishing Leaves Your Inbox | 5 min | Identify phishing attacks that arrive by SMS or phone call and apply the same verification habits you would use with email. | NIST, FTC |
| Phishing in the Age of Collaboration Tools | 5 min | Spot phishing attempts delivered through workplace chat and file-sharing platforms and respond without disrupting legitimate work. | ISO, SOC2 |
| Reporting Phishing: Why It Matters and How to Do It Right | 5 min | Report a suspected phishing attempt quickly and correctly so your security team can protect the whole organization, not just you. | NDPA, ISO, NIST |
| Protecting High-Value Targets: Executive and Finance Phishing | 5 min | Recognize business email compromise and executive impersonation attacks and apply the verification steps that stop fraudulent transfers. | CBN, FTC, ISO |
| Building a Phishing-Resistant Mindset for the Long Run | 5 min | Apply a consistent set of daily habits that keep your phishing awareness sharp over time, not just right after training. | ISO, NIST |
Compliance codes show which frameworks each module supports. Some clauses are marked "verify" in our source review, meaning we phrase the claim cautiously rather than cite an exact, unconfirmed section number. See the glossary for term definitions.