In this workshop, your employees will learn basic cybersecurity concepts to protect themselves from threats such as phishing attacks and insecure password practices. They learn how to create secure passwords, identify potential threats and operate securely in a digital work environment. By being aware of security risks, your employees can help protect the company from cyber attacks and maintain the integrity of corporate data. Safety at work therefore becomes a joint responsibility that significantly reduces the risk for your company.

Cybersecurity in the work environment is crucial to protect sensitive company data. Employees who are aware of risks such as phishing and secure password practices can actively help protect the company from cyber attacks.

Benefits for you as a company:

• Protection against data loss and cyber attacks by sensitized employees
• Reduce the risk of security breaches and financial damage
• Fostering a safety culture in the company
• Strengthen customer and partner confidence in the security of their systems

1. The basics of cybersecurity and why they are important for every employee

• What is cybersecurity and why is it crucial for companies and employees?
• Threat landscape in the digital age: Common types of attacks and their consequences for companies
• The role of employees in cybersecurity: How each individual can contribute to the security of the company
• Raising awareness of current trends and developments in cybersecurity

2. Phishing: Detecting and preventing attacks

• What is phishing? Different types of phishing attacks (e.g. email phishing, spear phishing)
• How to identify phishing emails and links
• Practical examples: Identifying phishing strategies
• Response options: What to do when a phishing attack is detected?
• Secure communication: How to avoid phishing attacks and make reports correctly

3. Password security: Strong passwords and their management

• What makes a password secure? Best practices for creating passwords
• The importance of password length controls and complexity
• Multi-factor authentication (MFA) as an additional protection mechanism
• Using password managers: benefits and safe use
• Avoid common password security mistakes (such as using the same passwords for multiple accounts)

4. Work securely in the home office and on the go

• Secure connection: use VPNs and secure networks
• Protecting corporate data on private devices (BYOD — Bring Your Own Device)
• Data security when using public WiFi networks
• Secure use of cloud services and shared platforms
• Using personal devices and securing them in a work context

5. Secure use of emails and online communication

• Best practices for handling email (e.g. no unencrypted attachments)
• Safe handling of links and attachments in emails
• Encrypting sensitive emails and documents
• Protection against unwanted contacts: How to protect yourself against spam and unwanted emails

6. Responsible use of data

• What is personal data and how is it protected under the GDPR?
• Handling sensitive information: encryption and secure storage
• Data protection guidelines in companies and how they are observed on a daily basis
• Avoiding data loss and misuse due to insecure storage or transfer

7. Protection against malware and ransomware

• What is malware and ransomware? Types and their effects on companies
• Protection measures: anti-virus software and regular updates
• Dealing with suspicious files and applications: What to do if malware is suspected?
• Ransomware: Prevention, Detection, and Response Strategies

8. Code of conduct for cybersecurity in companies

• Development and implementation of corporate cybersecurity policies
• Training measures to regularly raise awareness and refresh
• The right behavior in the event of a cyber incident: emergency plan and escalation processes
• Fostering a safety culture: How employees can proactively contribute to corporate security

9. Legal Aspects of Cyber Security

• Overview of relevant laws: General Data Protection Regulation (GDPR), IT Security Act
• Responsibility of employees in the event of a violation of safety guidelines
• Legal consequences and reporting requirements for cybersecurity incidents
• Working with IT and legal departments in the event of a security incident

10. Practical exercises and tests

• Simulating phishing attacks and how to respond to them
• Create strong passwords and implement multi-factor authentication
• Case studies: Secure data transmission and handling of sensitive information
• Tests to check the level of knowledge and the safe use of digital tools

‍