Security Basics: Four Habits That Stop Most Attacks
Included with TrainMeUK — no separate course purchase required.
Stop before acting on an unexpected message; use passkeys or strong unique passwords, plus MFA; and keep devices updated and locked.
- Assign to
- All staff
- Duration
- 25 minutes
- Evidence
- 12-question quiz
- Your version
- Editable
What they will be able to do
- Stop before acting on an unexpected message.
- Use passkeys or strong unique passwords, plus MFA.
- Keep devices updated and locked.
- Report anything odd, including your own mistakes.
The course
- 01Monday: Pause
- 02Tuesday: Protect
- 03Wednesday: Update
- 04Thursday: Speak up
The decision they practise
In “Kai tells Lorraine”, a face-to-face conversation, learners practise what to say and do when the other person pushes back. The wrong options are things a well-meaning person might genuinely say, and the feedback explains why each one is tempting. Short animations show “Five layers of protection” and “Kai’s mistake: report it at 02:10 or at 08:00?”.
How you know they finished
The 12-question quiz mixes multiple choice, matching and sequencing questions and returns to the opening story.
Roll it out with
Relevant legislation and guidance
The course draws on these. Which ones apply depends on the organisation and the role. Finishing the course is a training record.
- UK GDPR and the Data Protection Act 2018
- Network and Information Systems Regulations 2018 (NIS)
- Computer Misuse Act 1990
How this course is built
Interactive activity
Learners practise the decision in the course, including what to say when someone pushes back.
Edit it in the builder
On Growth and above, adapt the scenarios and wording to your own workplace, policies and reporting procedures.
A record they finished
The 12-question quiz closes the course, so you can show who completed it.
Related courses
TrainMeUK course library
Ready to make Security Basics easier?
Give your team access to practical, interactive training, with automated assignments, reminders and completion records managed in one place.
Related reading
- Cyber security training requirements for employeesWhich staff need cyber training in the UK, how often to refresh it, and what an audit looks for.
- CEO fraud training for UK SMBsWhat staff need to do when a message looks like it came from the boss, and how to show the training happened.
- ISO 27001 and Cyber Essentials trainingWhy security awareness training is part of ISO 27001 and Cyber Essentials, not a side task.