In this cybersecurity training you learn to recognise the most common attack routes in everyday office work and to protect yourself and your team, and it suits all employees without an IT background. You spot phishing and social engineering, set up passwords and multi-factor sign-in sensibly, secure laptops and smartphones and know whom to inform, and how, when an incident occurs. The content is vendor-neutral and transfers to your company's own policies.
What you’ll take away.
- Recognise phishing emails, calls and messages from concrete signs
- Set up and justify a password manager and multi-factor authentication
- Secure devices with updates, encryption and a screen lock
- Recognise security incidents and report them through the right channel
- Agree secure behaviour for home office and travel within the team
Your training in detail
- Who is it for?
- All employees, team leads and managing directors of small and mid-sized companies who want to strengthen their security culture.
- Prerequisites
- No technical prerequisites. Everyday use of email, a browser and a smartphone is enough.
- Format & planning
- Suggested format: half a day to one full day (about 4 to 7 hours) live online or on site by arrangement. Scope depends on prior knowledge.
Agenda: from understanding to application
Our independently developed agenda proposal. Focus areas, lab environment and scope are agreed before booking.
The threat picture for mid-sized firms: phishing, ransomware, CEO fraud and how an attack typically unfolds.
Recognising phishing and social engineering: sender checks, link previews, urgency pressure and calling back on known numbers.
Passwords and sign-in: password managers, passkeys, authenticator apps and why SMS codes are a second choice.
Devices and data: operating system updates, disk encryption, backups following the 3-2-1 rule and safe storage media.
Incident response: what to do after a click, whom to inform, what not to delete and what a reporting chain looks like.
Placing it within frameworks such as the NIST Cybersecurity Framework and BSI IT-Grundschutz, plus an action plan for the team.
Suggested exercise: Sort ten invented messages into genuine and phishing, justify each decision and define a reporting chain for suspected cases in your team.
Exams, licences & credentials
No exam is tied to this course. For further steps, vendor-neutral exams such as CompTIA Security+ may be considered. Attending alone awards no vendor certification. Exam fees are only included if confirmed in the offer.
Vendor references & review date
Sources checked on 2026-11-03. These sources describe the technology or external exam requirements. They do not imply a partnership with NextNowa.
Your learning content
These objectives describe the training topic. The specific syllabus, duration, dates, trainer and price are agreed before booking.
Frequently asked questions
Is the cybersecurity training understandable without IT knowledge?
Yes. The training is aimed at employees in everyday office work and explains terms such as phishing, MFA or ransomware with concrete examples. Technical depth such as network analysis or penetration testing is not part of it. For IT teams a deeper session can be planned by arrangement.
Is a password manager enough for secure accounts?
It is a good start because you can use a long, unique password for every account. Add multi-factor sign-in, ideally with an authenticator app or passkey, so a stolen password alone does not help an attacker. You set up both as an example in the training.
What should I do if I clicked a phishing link?
Report it immediately to the responsible contact, even if it feels embarrassing, because time matters. Enter no further data, disconnect the device from the network if in doubt and change affected passwords from another device. We practise exactly these steps and record them as a reporting chain.
Does Cybersecurity Essentials include a certificate?
No exam is tied to this course. For further steps, vendor-neutral exams such as CompTIA Security+ may be considered. Attending alone awards no vendor certification. Exam fees are only included if confirmed in the offer.