Trainings

Your company's biggest information security risk isn't software — it's human behavior. Cyber attackers no longer need to break through firewalls or crack complex code. They simply study people.

They observe habits, emotions, routines, and blind spots. Then they exploit them through social engineering, phishing, pressure tactics, authority impersonation, and psychological manipulation — because these methods work far more reliably than technical hacks. And they work fast.

Today, over 95% of data breaches begin with a human mistake.

Not because employees are careless, but because attackers have become experts at influencing decisions, creating panic, and triggering responses before anyone realizes something is wrong.

This training program is different from typical cybersecurity courses.

It doesn't teach you how to configure systems — it teaches you how to understand people: how attacks target emotions, how manipulation works, how decision-making under pressure is exploited, and how to build behaviors that shut down attacks before they succeed.

Part 1: The Fundamentals

1. Introduction and Goal Setting

◦ Objectives of the Training

◦ "Does this look familiar to you?" (Examples of poor infosec awareness and common mistakes)

2. Core Concepts of Information Security

◦ Definition of Infosec

◦ Fundamental Concepts

1. Who decides what data is confidential?

2. Introduction to the CIA Triad - Confidentiality, Integrity, Availability

3. Data Privacy and Local Context

◦ Key Data Privacy Concepts

1. What was the Data Privacy Act created for?

2. Why should we all be concerned how our personal information is being handled

◦ Data Breach Incidents in the Philippines (Largest, most impactful cases)

1. Companies targetted

2. Data lost

3. Cost and consequences

Part 2: Current Threats & Defenses

1. Personal and Digital Risks

◦ Social Media Dangers and Best Practices

▪ Oversharing

▪ Critical information disclosure

◦ Password Security

▪ Why is a strong password so essential for everyone using the internet

▪ What are weak passwords and what are robust passwords

▪ "One ring to rule them all" error

▪ Brute force password cracking and current password standards

▪ What is multi-factor authentication and why it's become a standard

▪ Clicking and Other High-Risk Behavior

2. Malware Deep Dive

◦ Definition and Types of Malware

◦ Signs of a Malware Infection

▪ For smartphones

▪ For laptops and desktops workstations

◦ Why you shouldn't delay software updates

◦ Benefits and Risks of Anti-Virus Software

3. Understanding Social Engineering

◦ Fundamentals of Social Engineering

▪ How and why it works

▪ "Hacking the Human" - how human behavior is exploited

◦ The Social Engineering Attack Cycle

◦ Recognizing the Signs of Social Engineering

◦ Types of Social Engineering Attacks

▪ Phishing

1. Smishing

2. Vishing

3. Whaling

4. Spearphishing

5. Baiting

6. Scareware

7. Watering hole attacks

▪ Spoofing and Business Email Compromise (BEC)

▪ Spamming (and why you should never respond to spam)

Part 3 - Emerging and Physical Threats

• Hardware Attacks (Bad USB, Juice Jacking, etc.)

• Artificial Intelligence - Our new "friend" is also the latest and

greatest infosec threat

• Summary and integration

• Q&A