Cyber Security Awareness Fundamentals
Learn how common online attacks work, recognize the moment your trust is being tested, and build habits that protect you...
9 lessons · 5 hr 41 minCourse
Social Engineering: Break the Script
About this learning content: Courses, lessons, assessments, explanations and illustrations may be created with the help of artificial intelligence. We review and check the material and do our best to avoid incorrect or outdated information, but mistakes, omissions or ambiguous questions may remain. Please verify information before relying on it for professional, security, legal or operational decisions. Read the full notice or report an issue.
Difficulty
Beginner
Modules
3
Lessons
6
Time
3 hr 38 min
Language
en
Created by
Threat Intelligence Lab
Updated
11 September 2026
About this course
Social engineering succeeds when an attacker steers a normal human decision toward an unsafe action. This course teaches non-specialist employees, team leads, and security champions to recognize that steering, identify the decision at risk, and regain control before trust becomes access, money, data, or authority.
The course promises a reusable defensive habit: interrupt the script, move verification onto a channel the requester did not supply, reduce the requested action to its real consequence, and report what happened while the evidence is still fresh. Learners apply that habit to email, chat, voice, QR codes, help-desk interactions, payment changes, credential requests, and multi-stage impersonation.
The scope stays deliberately human and operational. It explains attacker tactics only to improve defensive decisions; it does not teach offensive manipulation, technical malware analysis, or organization-specific incident procedures. By the end, learners can diagnose a suspicious request, choose a proportionate verification step, protect recovery and approval paths, and make a concise report that helps defenders act.
What you'll learn
- ✓ Identify the decision, asset, and trust signal an attacker is attempting to control in a social-engineering scenario.
- ✓ Apply an interrupt–verify–limit–report routine to suspicious requests across written, voice, and in-person channels.
- ✓ Select an independent verification path appropriate to credential, payment, data, access, and authority requests.
- ✓ Produce a concise, blame-free report that preserves useful context and accelerates defensive action.
Before you begin
You will get more from this course if these foundations are already familiar.
- Everyday workplace familiarity — Learners should be familiar with ordinary email, messaging, phone, login, payment, or approval workflows; no cybersecurity background is required.
Course content
Module 1: 1. See the Decision Path
Social engineering becomes easier to resist when learners stop asking only whether a message looks fake and instead map the decision it is trying to produce. This module makes the hidden path visible: the claimed identity, borrowed context, emotional pressure, requested action, and asset at risk.
The Attacker’s Product Is Your Next Action
Map a social-engineering attempt as a chain from pretext to consequence, then identify the exact decision the attacker needs.
Pressure, Authority, and Borrowed Familiarity
Recognize how urgency, authority, scarcity, helpfulness, and familiar context narrow attention without proving a request is false.
Module 2: 2. Interrupt the Script Across Channels
The same manipulation script can arrive through email, chat, SMS, QR code, phone, video, or a help-desk conversation. This module teaches channel-aware clues while keeping the response stable: pause the interaction, leave the supplied path, and verify independently.
Email, Chat, SMS, and QR Codes: Read the Route
Separate what a message says from where its links, replies, files, and QR codes attempt to route the next action.
Voice, Video, and Help-Desk Impersonation
Handle convincing voices, faces, caller IDs, and support stories as claims that still require independent proof.
Module 3: 3. Engineer Safer Decisions
Personal awareness is strongest when workflows make the safe choice easier. This module applies independent verification, least authority, dual control, and blame-free reporting to high-impact requests so one hurried moment does not become an organizational incident.
High-Impact Requests Need a Second Path
Match payments, credentials, recovery, access, and sensitive-data requests with verification controls independent of the request itself.
Report the Attempt, Repair the Path
Preserve useful context, report without blame, respond after interaction, and improve the workflow that made manipulation possible.