Home / All Courses / Cyber Security and Information Security Awareness
Cyber Security and Information Security Awareness

A practical, visual introduction to everyday cyber and information security for all staff. Learn to spot phishing and social engineering, use strong passphrases and multi-factor authentication, handle data and devices safely, work securely on remote and public networks, recognise ransomware and report a suspected incident fast, as paced slides with diagrams, a real workplace scenario and quick self-checks. Informed by the ACSC Essential Eight (the staff-facing strategies: multi-factor authentication, patching and backups) and your organisation's data-handling duties under the Privacy Act 1988 (Cth).
What You Will Learn
- Recognise common cyber threats: phishing, social engineering and ransomware, and how attackers target everyday staff
- Spot the warning signs of a phishing or scam message and respond without clicking, replying or paying
- Create strong, unique passphrases and use multi-factor authentication to protect your accounts
- Handle personal and business information and devices in line with your organisation's duties under the Privacy Act 1988 (Cth)
- Work safely on remote and public networks and report a suspected security incident quickly through the right channel
Course Content
- Cyber security starts with you
- By the end of this course, you'll be able to:
- Most attacks target people, not just technology
- The ACSC sets out eight baseline strategies to blunt most attacks
- Good security protects three things about information
- A breach harms real people, and can breach the law
- Phishing tricks you into acting before you think
- Phishing arrives on more than just email
- Social engineering manipulates trust, urgency and fear
- Slow down and check four things before you act
- Safe habits beat risky habits with suspicious messages
- Business Email Compromise targets payments and data
- Weak, reused passwords are the easiest way in
- Build a strong passphrase you can actually remember
- A password manager makes unique passwords practical
- Multi-factor authentication combines two or more different proofs
- Multi-factor authentication stops most account takeovers
- You handle information the Privacy Act protects
- Handle personal information with care at every step
- Lock it down: a locked screen and a clean desk
- Keep devices updated, encrypted and app-controlled
- Sharing information: right way and wrong way
- Public Wi-Fi is convenient, and risky
- Staying safe on public and home networks
- Ransomware locks your files and demands payment
- If you suspect an incident, act fast and follow instructions
- Report early: a fast report limits the damage
- Now put it all together
- A busy Thursday in the office
- The five things to carry away
Who This Course Is For
All employees, contractors and volunteers who use email, accounts, devices or handle information at work. No technical background needed.
Written by Kam Askari, Managing Director of Creative Directions Management Consulting Pty Ltd, ISO 9001, ISO 14001 and ISO 45001 Lead Auditor. MBA, Graduate Diploma in Occupational Health and Safety, MAICD. Checked against the sources listed below.
Sources and Legal References
This course is aligned to 7 official sources. Legal and regulatory references checked between 31 August 2026 and 4 October 2026.
Sources and Further Reading
This course draws on the following official sources. Always rely on the current version on the regulator’s website.
- LegislationPrivacy Act 1988 (Cth)As at 31/08/2026
- LegislationCyber Security Act 2024 (Cth)As at 31/08/2026
- Regulator guidanceOffice of the Australian Information Commissioner, About the Notifiable Data Breaches schemeAs at 31/08/2026
- Regulator guidanceAustralian Cyber Security Centre, Essential EightAs at 31/08/2026
- Regulator guidanceAustralian Cyber Security Centre, Personal Cyber Security First Steps Guide (June 2025)As at 02/09/2026
- Regulator guidanceThe Privacy Act (OAIC overview)As at 31/08/2026
- LegislationCyber Security (Ransomware Payment Reporting) Rules 2025 (Cth)As at 04/10/2026
Always rely on the current version on the regulator’s website.
Seven day refund if you have not started
Or
For employers and teams
Buy Seats for Your Team
$39.00 per seat, inc GST
Total inc GST$195.00
Or
What You Get
Certificate of Completion
This is to certify that
has successfully completed
All learning modules and the final assessment
Kam Askari
Director, Creative Directions Management Consulting Pty Ltd
This is a certificate of completion of a non-accredited professional development course. It is not a nationally recognised qualification, a VET statement of attainment, a competency card, a licence, or evidence of competency. It is issued by Creative Directions Management Consulting Pty Ltd, which is not a Registered Training Organisation.
Sample layout. Certificate ID WP-SAMPLE-0001 verifies as Hazardous Manual Tasks and Manual Handling Safety.
- Certificate verified by its ID
- 100% online, self-paced
- Six months of access
Bought for yourself: six months of access from the day you pay. Team seat: six months from the day the worker activates their code.
Suggested Next Courses

Privacy and Data Protection (Australian Privacy Principles)
40 minutes
Online, self-paced

Records and Information Management Awareness
35 minutes
Online, self-paced
