Course track
All-Staff Core
The mandatory baseline every employee completes: phishing, social engineering, passwords and MFA, mobile scams, AI risks, and data protection basics under NDPA.
Who takes this: Every employee, every role, new hires within their first 30 days
NDPAISOSOC2NISTPCICBNFTC
| Module | Length | What staff learn | Maps to |
|---|---|---|---|
| Welcome & Why Cybersecurity Matters | 3 min | Explain why every employee is a security control and set expectations for the program. | NDPA, ISO, SOC2, NIST |
| Today's Cyber Threat Landscape | 5 min | Name the top 5 threats hitting SMBs and enterprises now, and connect them to real business cost. | ISO, SOC2, NIST |
| Phishing Fundamentals: Spotting the Hook Priority | 6 min | Identify the 5 red flags in a phishing email and know the correct reporting step. | ISO, SOC2, PCI, NIST |
| Social Engineering Tactics Priority | 5 min | Recognize pretexting, baiting, tailgating and urgency manipulation. | ISO, SOC2, NIST |
| Deceptive Calls & Vishing | 4 min | Spot a scam call pattern and verify caller identity before acting. | ISO, SOC2, NIST |
| Safe Browsing & the Digital Landscape | 4 min | Avoid malicious links and downloads, and use HTTPS and browser warnings correctly. | ISO, SOC2, NIST |
| Password Security & MFA Basics Priority | 5 min | Build a strong passphrase, explain why MFA stops most account takeovers, and use a password manager. | ISO, SOC2, PCI, NIST |
| Mobile, SMS & WhatsApp Scams | 4 min | Identify smishing and WhatsApp impersonation scams, and never tap a link from an unknown number. | NDPA, ISO, NIST |
| QR-Code Phishing ("Quishing") | 3 min | Treat a QR code like a link: verify before scanning in public or in email. | ISO, NIST |
| MFA Fatigue & Account Takeover Priority | 4 min | Recognize MFA-bombing and never approve a push notification you did not request. | ISO, SOC2, NIST |
| AI Deepfake & Synthetic Voice/Video Fraud Priority | 6 min | Recognize signs of a cloned voice or deepfake video call and apply a verification callback rule. | ISO, SOC2, CBN, NIST |
| Safe Use of AI Tools at Work Priority | 6 min | Know what data must never go into a public AI chatbot, and use only approved AI tools. | NDPA, ISO, SOC2, NIST |
| Data Protection & Privacy Basics under NDPA | 6 min | Explain lawful processing, data subject rights, and the breach reporting rule. | NDPA, ISO, NIST |
| Incident Reporting: See Something, Say Something | 3 min | Know who to contact and what to report in the first 10 minutes of suspecting an incident. | ISO, SOC2, NIST |
| Physical Security & Clean Desk | 3 min | Lock screens, secure documents, and challenge unbadged visitors. | ISO, SOC2, NIST |
| Social Media Oversharing | 4 min | Avoid posting information attackers can use for pretexting or OSINT. | ISO, NIST |
| Protecting Financial Information Online | 4 min | Safely handle card and bank data, and recognize fake payment portals. | PCI, FTC, ISO |
| Travel Security | 4 min | Secure devices and data on the road, and avoid public charging stations and open Wi-Fi risk. | ISO, NIST |
| Nigeria Spotlight: POS & Bank-Alert Fraud | 4 min | Recognize fake POS alerts and "wrong transfer, please refund" scams. | CBN, NDPA |
| Nigeria Spotlight: SIM-Swap Fraud | 4 min | Recognize signs of a SIM swap in progress and protect the mobile line tied to banking. | CBN, NDPA |
| Nigeria Spotlight: BVN/NIN/OTP Scams Priority | 4 min | Never share a BVN, NIN, or OTP with anyone, including someone claiming to be bank staff. | CBN, NDPA |
| Nigeria Spotlight: Fake Recruitment & Loan-App Scams | 4 min | Spot fraudulent job offers and predatory loan apps that harvest contacts and data. | NDPA |
| Nigeria Spotlight: Impersonation of CBN/EFCC | 3 min | Recognize fake regulator calls or letters demanding payment or account access. | CBN, NDPA |
| US Spotlight: IRS/W-2 and Tax-Season Scams | 4 min | Recognize IRS impersonation and W-2 phishing aimed at payroll and HR. | FTC, NIST |
| Course Wrap-Up & Annual Refresher | 3 min | Summarize the year's key behaviors and preview the annual refresher cadence. | NDPA, ISO, SOC2, NIST |
Compliance codes show which frameworks each module supports; they describe what the training content covers, not a guarantee of legal compliance. Confirm specific clause wording with your own compliance advisor before citing it to a regulator or auditor.