Course track
Phishing Defense Essentials
A stand-alone deep dive on phishing: spear phishing, fake login pages and MFA-bypass kits, QR phishing, smishing/vishing, and reporting the right way.
Who takes this: All staff wanting focused phishing training, or a stand-alone entry point for new hires
ISONISTSOC2FTCNDPACBN
| Module | Length | What staff learn | Maps to |
|---|---|---|---|
| Spear Phishing and OSINT | 5 min | Recognize phishing built from public information about you or your company. | ISO, NIST |
| Beyond the Red Flags: Fake Login Pages and MFA-Bypass Kits | 6 min | Verify the real web address before entering credentials, since completing MFA no longer proves a page is genuine. | ISO, NIST |
| QR Phishing in the Real World | 4 min | Treat an unexpected QR code like an unverified link, in person and online. | ISO, NIST |
| Phishing Practice: Four Scenarios, Four Decisions | 5 min | Apply the full phishing checklist across email, SMS, WhatsApp, calls, and QR codes. | ISO, SOC2, NIST |
| How Phishing Actually Works: The Attacker's Playbook | 5 min | Explain the basic mechanics of a phishing attack so you can recognize the pattern before you become a target. | ISO, NIST |
| Smishing and Vishing: When Phishing Leaves Your Inbox | 5 min | Identify phishing attacks that arrive by SMS or phone call and apply the same verification habits you would use with email. | NIST, FTC |
| Phishing in the Age of Collaboration Tools | 5 min | Spot phishing attempts delivered through workplace chat and file-sharing platforms and respond without disrupting legitimate work. | ISO, SOC2 |
| Reporting Phishing: Why It Matters and How to Do It Right | 5 min | Report a suspected phishing attempt quickly and correctly so your security team can protect the whole organization, not just you. | NDPA, ISO, NIST |
| Protecting High-Value Targets: Executive and Finance Phishing | 5 min | Recognize business email compromise and executive impersonation attacks and apply the verification steps that stop fraudulent transfers. | CBN, FTC, ISO |
| Building a Phishing-Resistant Mindset for the Long Run | 5 min | Apply a consistent set of daily habits that keep your phishing awareness sharp over time, not just right after training. | ISO, NIST |
Compliance codes show which frameworks each module supports; they describe what the training content covers, not a guarantee of legal compliance. Confirm specific clause wording with your own compliance advisor before citing it to a regulator or auditor.