Data Security Basics

By the end

What you'll build

• Classify a piece of information and choose the right handling and sharing method for it
• Set up strong authentication and use a password manager for work accounts
• Analyse a suspicious message for phishing indicators and report it through the correct route
• Apply data minimisation and retention principles to information you collect or hold
• Report a suspected security or privacy incident promptly and preserve the evidence

Curriculum

What's inside

7 modules · 41 lessons

1. 01

   What you are protecting

   6 lessons
   • Classifying information before you decide how to handle it
   • Personal data, confidential data and public data
   • Where company data actually lives, including the places you forget
   • Handling rules that follow the classification
   • Data you create without noticing
   • + 1 more lesson
2. 02

   Accounts and access

   6 lessons
   • Passwords, passphrases and multi-factor sign-in that hold up
   • Using a password manager properly
   • Why shared accounts cause problems later
   • Least privilege and making a sensible access request
   • Locked screens, unattended sessions and handover
   • + 1 more lesson
3. 03

   Attacks aimed at people

   6 lessons
   • Taking a phishing message apart piece by piece
   • Voice and message-based social engineering
   • Invoice and payment redirection attempts
   • Approval fatigue and prompts you did not trigger
   • Reporting a suspicious message quickly and without embarrassment
   • + 1 more lesson
4. 04

   Everyday secure handling

   6 lessons
   • Sharing a file without over-sharing it
   • Email, links and attachments
   • Removable media and personal storage accounts
   • Printing, paper handling and clear desk
   • Travel, public networks and overlooked screens
   • + 1 more lesson
5. 05

   Privacy in daily work

   6 lessons
   • Handling personal data with purpose, minimisation and retention in mind
   • Collecting only what you actually need
   • Recognising a request from an individual about their data and passing it on
   • Sending personal data to a third party
   • Deleting and retaining information on schedule
   • + 1 more lesson
6. 06

   When something goes wrong

   6 lessons
   • Reporting a suspected incident within the first hour
   • What counts as an incident, including lost devices and misdirected email
   • What not to do: deleting, hiding, or investigating alone
   • Working with the response team while it is live
   • Learning from incidents without assigning blame
   • + 1 more lesson
7. 07

   Practice and check

   5 lessons
   • The signal, and the check that settles itmatch pairs
   • The first ten minutes after you enter your password on the wrong pagesequence order
   • Terms worth getting exactly rightfill blank
   • The thread that answered backscenario
   • Course quizquiz

The shape of it

How this course works