1. Passwords & Authentication
Quick Quiz
Which of the following is the strongest password practice?
2. Device Security
3. Email & Messaging Safety
Quick Phishing Example
Subject: Verify recent login attempt to your Microsoft 365 account
We detected a sign-in to your Microsoft 365 account from a new Windows device in London, United Kingdom. If this was you, no action is required.
If you don't recognise this activity, please verify your account immediately to prevent unauthorised access to your mail and files.
Verify activity
Is this email legitimate?
Red Flags:
- Sender address uses an unusual domain:
microsoftnotice.com (not an official Microsoft domain).
- It asks you to click a link instead of instructing you to sign in via the official portal manually.
- Uses urgency and vague language with no reference to the service name or account alias.
- Links and branding may look convincing but the reply-to/sender don't match official addresses.
Real Microsoft emails typically come from: @microsoft.com, @accountprotection.microsoft.com.
4. Internet & Data Use
5. Awareness & Reporting
6. Remote Work & Mobile Devices
7. Social Engineering & Physical Security
Social Engineering Quiz
What should you do if someone claiming to be from IT calls and asks for your password to "fix a system issue"?
8. Data Handling & Privacy
9. Mobile Device Security