🔑 1. Prerequisites & Context

• Required Tools/Skills: 🔗 basic-computer-literacy, 🔗 password-management
• Core Concept: Training people to recognize threats and act safely online.

🧠 2. The Big Idea: Why This Matters

Think of your computer like a locked house. Even with the best locks, a thief can just trick you into opening the door for them.

• Phishing: Fake messages that steal secrets.
• Social Engineering: Tricking people into giving away access.
• MFA: Adding a second lock to your accounts.

🔧 3. Step-by-Step: How It Works

Security isn't about memorizing rules. It is about a consistent process you use every time you see something unexpected.

Spot a Trigger ➔ Question the Source ➔ Report the Threat

[Suspicious Request] + [Verification Step] = [Prevented Breach]

Phase 1: Look for red flags like urgent language or strange senders.

Phase 2: Contact the person through a known, safe channel to verify the request.

Phase 3: Use your company's report button to warn others immediately.

💡 4. A Practical Example in Action

You get an urgent email from your "CEO" asking for gift cards for a client. Instead of panicking, you notice the email address is slightly misspelled. You send a quick chat to your boss, who confirms it's a scam.

⚠️ 5. Common Mistakes to Watch Out For

❌ The Mistake: Clicking "Unsubscribe" in a suspicious email to make it stop.

✅ How to Fix It: This tells the hacker your email is active. Just block and delete the message.

⚡ 6. Your Action Checklist

• Step 1: Enable Multi-Factor Authentication on your primary email.

• Step 2: Hover over links to see the real destination.

• Step 3: Practice saying "no" to unexpected digital requests.

• Step 4: Research the latest social engineering trends this month.