Overview
Most cyber incidents in a workplace do not begin with a clever hacker. They begin with a normal person having a busy day, clicking a link that looked fine. The aim of this series is simple: make every staff member harder to trick, and quicker to speak up when something feels wrong.
The series uses plain language, real examples of the kinds of scams Australians are facing right now, and habits people can start using the same afternoon. It pairs with our AI training, but it stands on its own. Where the AI series teaches people to use the tools well, this series teaches them to keep themselves, and their workplace, safe while doing it.
The scammer's job is to rush you. Your job is to slow down. Most of this series comes back to that one idea.
Who It's For
Everyone. Office staff and people working out in the communities. No technical background is needed. The series works just as well for someone who is still finding the buttons in their email as it does for a confident computer user. The scams land on everyone the same way.
The language is kept plain and free of jargon. Where a technical word is unavoidable, it is explained in everyday terms the first time it appears.
How It Runs
Four live online sessions, two hours each, usually one per week. The whole series is built for online delivery: it runs on Microsoft Teams and is optimised to work even where the internet is patchy. Every session is recorded, so anyone who misses one, or who is at a low-bandwidth site, can catch up later.
Each session stands on its own, so missing one still leaves you with plenty. But the four are built to flow in order, from everyday habits, to spotting scams, to the newer AI threats, and finally to what to do and who to tell when something goes wrong.
Each session comes with a one-page download: a checklist, the trusted links, and the contacts that matter. Keep them on your phone or pin them near your desk.
Joining Online
Every session runs live on Microsoft Teams, and is recorded so you can catch up later or rewatch on a low-bandwidth day. You do not need a fancy setup. A phone, tablet, or computer with the Teams app, or a web browser, is enough. Here is how to join smoothly, even where the internet is patchy.
Tips for a patchy or low-bandwidth connection
- Turn your camera off. Video uses far more data and bandwidth than anything else. If your connection is struggling, switching your camera off is the single biggest fix; you can still hear, talk, and see the slides.
- Stay on mute unless you are speaking. It keeps the session clear for everyone and uses a little less bandwidth.
- Use the phone audio option if your internet drops. Teams can dial you in by phone for the sound while you follow the slides. Ask the trainer if you need this.
- Close other apps and downloads. Streaming, big downloads, or another video call on the same connection will slow Teams down. Close them before you join.
- Get close to the wi-fi, or use mobile data. A stronger signal means a steadier call. If the wi-fi is poor, your phone's mobile data or a hotspot may hold up better.
- Watch the recording later. If the connection will not cooperate on the day, every session is recorded; you lose nothing by catching up when the internet is better.
If the call is breaking up, turn your camera off first. It frees up more bandwidth than anything else and usually steadies the sound straight away.
Finding your way around Teams
When you join, a small bar of buttons sits at the top or bottom of the screen. Move your mouse, or tap the screen on a phone, to make it appear. The ones you will use:
- Mute and unmute. The microphone button. A line through it means you are muted and others cannot hear you. Tap it to speak, and tap it again to mute when you are done. Please stay muted unless you are talking.
- Camera on and off. The camera button, next to the microphone. A line through it means your camera is off. Turn it off to save bandwidth on a poor connection.
- Chat. The speech-bubble button opens the chat panel on the side. You can type a question there at any time, which is handy if your microphone is not working or you would rather not speak up. The trainer keeps an eye on the chat.
- Raise hand. The hand button, sometimes tucked under a "React" button, puts a small hand up next to your name so the trainer knows you have a question, without interrupting. Tap it again to lower it.
- Leave. The red "Leave" button ends the call for you. If you drop out by accident, just click the meeting link again to rejoin.
Join on mute, camera off if your connection is shaky, ask questions in the chat or with the raise-hand button, and do not worry if you drop out; you can rejoin, and it is all recorded.
Why These Four Sessions
Session 1 sets the foundation: where the soft spots are, and the small daily habits that stop most everyday trouble.
Session 2 goes deep on the single biggest risk to any workplace: the convincing message built to trick a person.
Session 3 covers what has changed lately: AI-made scams, deepfakes, and the risk of leaking information into new tools.
Session 4 makes it about the whole organisation: what to do when something goes wrong, how and when to report, and the shared job of keeping everyone safe.
The Sessions
Your Digital Footprint and the Daily Habits That Protect It
- Where the everyday soft spots are: accounts, passwords, devices
- Passphrases and password managers, the simple version
- Two-step login (multi-factor), and why it stops most account theft
- Staying safe on devices, public wi-fi, and out in the communities
- What counts as personal and sensitive information
Scams, Phishing, and the Message Designed to Trick You
- Why scams work on careful people: it's hurry, not stupidity
- The tells that give away a dodgy email, text, or call
- Scams aimed at workplaces and public money
- How to check a message is real before you click
- The calm, no-blame steps if you have already clicked
AI, Deepfakes, and the New Shape of Online Deception
- How AI is making scams more convincing
- Deepfakes: fake voices, fake video, fake calls, and the tells
- Checking whether something online is actually true
- Keeping workplace information out of AI tools
- Protecting your own face, voice, and name
When Something Goes Wrong: Reporting, Response, and Shared Responsibility
- What a security incident actually looks like day to day
- Reporting inside your workplace: speed beats certainty
- Reporting outside: ReportCyber, Scamwatch, IDCARE, eSafety
- Your part in keeping the whole workplace secure
- Turning the series into lasting habits
What You'll Take Away
A clear picture of where the everyday risks sit, and the small habits that head off most of them.
A working ability to spot a scam before it costs you or your workplace anything.
An up-to-date sense of how AI and deepfakes change the picture, and a plain rule for what never to paste into an AI tool at work.
A clear, practised understanding of what to do when something goes wrong, and exactly who to tell.
A short list of free, trusted tools and contacts to keep: cyber.gov.au, Have I Been Pwned, a password manager, Scamwatch, ReportCyber, and IDCARE.
Resources
A one-page printable take-home accompanies each session, in Word so you can print it or pin it by your desk. There is also a plain-English reference for any tricky words.
Reference · Tech Words, in Plain English
Every tricky word from the series, explained simply with an everyday example: two-step login, security keys, the cloud, OneDrive, HTTPS, encryption, VPNs, public wi-fi, shared devices, crypto, and QR-code scams.
Session 1 · Cyber hygiene checklist
The personal and workplace habits checklist, plus the free tools to start with the same day. Word document.
Session 2 · Scam-spotting card
How to spot a scam, the verify-before-you-click routine, what to do if you have clicked, and who to report to. Word document.
Session 3 · Spotting AI deception
The new rules for AI scams and deepfakes, a quick truth check before you share, and the rule for what never to paste into an AI tool. Word document.
Session 4 · Reporting & response
What counts as an incident, how to report it inside Council, the legal clocks that make speed matter, and who to contact for personal incidents. Word document.