AI & Digital · Upskilling · Free online
Cybersecurity for Non-IT Professionals
Spot it. Stop it. Report it.
Protect your accounts, devices and data at work and at home. Ten short modules built on real office situations: the suspicious email, the urgent payment request, the unknown USB stick. Free, self-paced and open on any device.
Spot it. Stop it. Report it. Here is how.
Why this course
Most cyber incidents start with a person, not a machine: a click, a reply, a reused password, a USB stick. This course gives you simple habits for your own desk, built on real office situations.
| Before | After the course |
|---|---|
| An email looks fine, so you click. | You check the sender, the link and the pressure before you act. |
| A new bank detail arrives from a supplier. | You verify it by a known phone number, not by replying. |
| A password is just a password. | You use a long passphrase and a password manager, plus MFA. |
| A USB stick turns up in the car park. | You hand it to IT and never plug it in. |
| Something odd happens and you stay quiet. | You report it early, in the right way, without blame. |
Who it is for
- Office and admin teams
- Managers and business owners
- Finance and accounting staff
- HR and reception
- Remote and mobile workers
Your route through the course
- Enrol freeName and email; sign-in arrives by email
- Start hereA guided map of the course
- LearnNotes, slides, audio and video, 10 modules
- CheckPractical knowledge check each module
- CertificateUnlocks when all 10 are done
What you will be able to do
Each module has four outcomes, and each one is checked by a practical question.
Module 1: Cybersecurity fundamentals
- M1.1 Explain cybersecurity and how it differs from information security.
- M1.2 State four ways cybersecurity protects an organisation.
- M1.3 Name the main threat actors and their motives.
- M1.4 Describe the core principles and your own responsibilities.
Module 2: How cybercriminals target people
- M2.1 Walk through the eight steps of the attack chain.
- M2.2 Explain how attackers gather information about you.
- M2.3 Recognise how trust and urgency are used to manipulate.
- M2.4 Say where an employee can stop the attack.
Module 3: Business email compromise and payment fraud
- M3.1 Explain how business email compromise works and its attack pattern.
- M3.2 Spot the urgency, authority and secrecy tricks in a payment request.
- M3.3 Apply out-of-band verification before changing bank details or paying.
- M3.4 Explain why segregation of duties protects payments.
Module 4: Malware, ransomware and safe behaviour
- M4.1 Describe the main types of malware and what ransomware does.
- M4.2 Identify how malware gets in and its warning signs.
- M4.3 Follow the Stop, Protect, Report steps.
- M4.4 Use safe digital habits every day.
Module 5: Passwords and multi-factor authentication
- M5.1 Describe what makes a password strong.
- M5.2 Explain how credentials are stolen.
- M5.3 Use a password manager and unique passwords.
- M5.4 Explain MFA and respond correctly to an unexpected prompt.
Module 6: Secure use of email, internet and Microsoft 365
- M6.1 Check an email in five steps before acting on it.
- M6.2 Browse the internet safely.
- M6.3 Share files in Microsoft 365 with the right access.
- M6.4 Avoid accidental disclosure and classify data correctly.
Module 7: Information protection, mobile and remote working
- M7.1 Explain the CIA triad and classify information.
- M7.2 Store, share and dispose of information securely.
- M7.3 Protect phones, laptops and removable media.
- M7.4 Work remotely with a VPN and safe cloud sharing.
Module 8: Insider threats and the human factor
- M8.1 Describe the types of insider threat.
- M8.2 Explain how human error causes data exposure.
- M8.3 Recognise social engineering and psychological pressure.
- M8.4 Report concerns in the right way.
Module 9: AI-enabled cybersecurity threats
- M9.1 Explain how AI is changing cybercrime.
- M9.2 Spot AI impersonation of voices, faces and executives.
- M9.3 Verify a request before you act.
- M9.4 Avoid shadow AI and data leakage at work.
Module 10: Incident reporting and response
- M10.1 Recognise what counts as a cybersecurity incident.
- M10.2 Follow the detect, stop, protect, report steps.
- M10.3 Report lost devices, phishing, malware and account alerts.
- M10.4 Take part in a cyberattack simulation and learn from it.
Ten modules, three parts
Part A: Know the threat (modules 1–3). Part B: Defend (modules 4–7). Part C: People and response (modules 8–10). Every module has notes, slides, audio or video, and a knowledge check.
- 1Cybersecurity fundamentalsWhat is at stake and who attacks
- 2How cybercriminals target peoplePhishing, pretexting and pressure tricks
- 3Business email compromise and payment fraudFake invoices and bank-detail changes
- 4Malware, ransomware and safe behaviourAttachments, USB sticks and pop-ups
- 5Passwords and multi-factor authenticationStrong logins and suspicious prompts
- 6Secure use of email, internet and Microsoft 365Safe sharing and links
- 7Information protection, mobile and remote workingClassify, lock and carry data safely
- 8Insider threats and the human factorTailgating, oversharing and mistakes
- 9AI-enabled cybersecurity threatsDeepfake voices and AI-written scams
- 10Incident reporting and responseWhat to do first, and who to tell
Knowledge checks and certificate
Each module ends with a knowledge check made of real office situations: an email on screen, a payment request, a pop-up, a call from the boss. Complete all 10 checks and your certificate of completion unlocks in the course.
- LearnNotes, slides, audio, video
- CheckPractical questions, 10 modules
- CertificateUnlocks when all 10 are done
The online course is free. Face-to-face and in-house sessions are quoted. Prices are in Botswana pula (BWP).
What happens next
- Your sign-in details are emailed to you straight away.
- Sign in to the learning portal and open the course.
- Start with Start here: a step-by-step map of the course.
- Finish the 10 knowledge checks to unlock your certificate.
Free access for your team
Tell us your organisation and how many staff. We set up the seats, and each person gets their own login and certificate.
What happens next
- We reply in working hours.
- You send the staff list.
- Everyone receives their sign-in by email.
Book an in-house session
A facilitated session at your workplace for 5 or more people, built on the same real office situations. We send a quote PDF for your finance team.
What happens next
- Tell us the group size and dates.
- We send your quote.
- Accept it and we confirm the session.
Face-to-face group
A classroom session for a group of 5 or more, run by a CoreKnowledge facilitator. We send a quote PDF for your finance team.
What happens next
- Tell us the group size and venue.
- We send your quote.
- Accept it and we confirm the date.
Is it really free?
Yes. There is no price and no card needed. It is a CoreKnowledge community learning programme.
How do I start?
Press Enrol free, enter your name and email, and tick the consent box. Your sign-in details arrive by email and the course opens on our learning portal.
How long does it take?
About 2 to 3 days' equivalent of study (indicative). It is self-paced, so start any day and stop and resume on any device.
How am I assessed?
Each of the 10 modules ends with a practical knowledge check built on real office situations: a suspicious email, a payment request, a USB stick, a call from the boss.
Do I get a certificate?
Yes. Complete all 10 knowledge checks and the certificate unlocks in the course.
Who is it for?
Anyone who uses email, a phone or a laptop at work. No IT background is needed.
Can my organisation enrol a team?
Yes. Ask for an in-house or group session through the Help centre or WhatsApp and we will arrange it.
I already enrolled. Where do I log in?
Use the learning portal link on this page. Your course is called Cybersecurity for Non-IT Professionals.