Social Engineering: Break the Script
Learn to see social engineering as an attack on a decision path, interrupt the attacker’s script, verify through a tru...
6 lessons · 3 hr 38 minCourse
Cyber Security Awareness Fundamentals
About this learning content: Courses, lessons, assessments, explanations and illustrations may be created with the help of artificial intelligence. We review and check the material and do our best to avoid incorrect or outdated information, but mistakes, omissions or ambiguous questions may remain. Please verify information before relying on it for professional, security, legal or operational decisions. Read the full notice or report an issue.
Difficulty
Beginner
Modules
3
Lessons
9
Time
5 hr 41 min
Language
en
Created by
Threat Intelligence Lab
Updated
11 September 2026
About this course
A plain-language course for employees, students, families, and curious learners. It explains the mechanics behind phishing, account takeover, unsafe downloads, data exposure, backups, and incident recovery through familiar situations rather than company rules. Each lesson ends with actions a learner can use at home, at work, or while studying.
What you'll learn
- ✓ Explain how attackers turn attention, trust, software, and reused credentials into access.
- ✓ Recognize high-risk moments in messages, websites, downloads, account prompts, and data sharing.
- ✓ Use password managers, strong authentication, safer update routes, backups, and independent verification effectively.
- ✓ Respond constructively after a suspicious click, credential disclosure, malware warning, lost device, or account takeover.
Before you begin
You will get more from this course if these foundations are already familiar.
- Everyday internet use — You only need experience using a phone or computer, signing into accounts, and reading messages. No security background is assumed.
Course content
Module 1: Module 1: See the Attack Before It Wins
Begins with everyday digital life, then shows how scams borrow trust and manufacture urgency. Learners practice identifying the exact decision an attacker wants.
Your Ordinary Day Is the Attack Surface
Follow one normal day and discover where small digital choices become security decisions.
How Scams Borrow Trust
Learn why familiar logos, real conversation threads, caller ID, and personal details can still accompany a scam.
Pause, Leave the Path, and Verify
Turn vague suspicion into a repeatable verification routine that works under urgency.
Module 2: Module 2: Protect Accounts and Devices
Builds durable account and device habits, then applies them to websites, downloads, extensions, QR codes, networks, and updates.
Passwords, Passkeys, MFA, and Recovery
Understand what each sign-in layer protects and how account recovery can quietly become the weakest link.
Updates, Apps, and Permissions
Learn what installing software really grants and how to choose safer sources and permissions.
Links, QR Codes, Browsers, and Public Networks
Navigate unfamiliar links and public connections without relying on myths about HTTPS or Wi-Fi.
Module 3: Module 3: Protect Information and Recover
Connects privacy and sharing choices to backup, incident first aid, account recovery, and useful reporting.
Personal Information Has a Long Shadow
See how separate details combine into identity, targeting, and recovery risk.
Backups You Can Actually Restore
Move beyond “my files are in the cloud” and design a recovery path you have tested.
When Something Goes Wrong
Use incident first aid for suspicious clicks, stolen credentials, malware, payments, and lost devices.