Skip to content
Claim this template

Free course template · Global

Cyber incident response and breach reporting for non-specialists

A ready-made course, live deck and two surveys for all staff. AhaSlides tracks progress, completion and scores for you. 35 minutes, 6 lessons. Last reviewed 21 October 2026; not legal advice.

Claim the templatePreview the courseDownload SCORM for your LMS

Free. No credit card. Edit everything.

Course outline at a glance

  • The quiet laptop
  • What would you change?
  • Checklist
  • Quiz

  • Signs
  • How to report
  • Accordion
  • Process
  • Sorting activity
  • Matching quiz

  • The team's steps
  • Why time matters
  • Process
  • Tabs
  • Scenario
  • Quiz

  • Why people stay silent
  • What would you do?
  • Accordion
  • Scenario
  • Sorting activity
  • Multi-select quiz

  • Roles
  • Tabletop
  • Tabs
  • Scenario
  • Flashcards
  • Quiz

  • Next steps
  • Process
  • Quiz

Try some questions from the course

Question 1 of 3

Imogen sees a strange message on her laptop. What should she do first?

 

Speed matters. The team can judge the risk, but only once they know.

Lesson 1, The first ten minutes, teaches this. See the outline

Question 2 of 3

Why does the team want reports quickly, even when you are unsure?

 

Early reports give the team time to contain a problem and meet any legal duties.

Lesson 3, What happens next, teaches this. See the outline

Question 3 of 3

What is containment?

 

Containment limits the damage while the team investigates.

Lesson 5, Drill: your role, teaches this. See the outline

Learners earn a certificate

Your organisation

Certificate of completion

This certifies that

Alex Morgan

has completed

Cyber incident response and breach reporting for non-specialists

Completed on12 October 2026
Sample certificate with a placeholder learner name.

Style 1 of 6: Coral geometric

Everyone who finishes gets a certificate with their name, the course title and the completion date. Add your own logo, colours and signer.

Three pieces that work together

Learners prepare on their own, you answer questions live, and the surveys tell you what stuck. 7 fields to fill in with your own policy, contacts and locations; each one is highlighted inside the course.

Claim the template
The Cyber incident response and breach reporting for non-specialists course as a learner first sees it

Completion is tracked for you

Learners sign in to take the course, so every start, finish and score is recorded in AhaSlides. No spreadsheet to keep.

  • Who has finished

    See who has not started, who is in progress and who has completed the course.

  • Every score

    Each learner's answers to the quizzes and activities in the course.

  • What landed

    Survey results show what people took away, and the 30-day check-in shows whether they use it.

Claim the template

6 lessons, about 35 minutes

What learners can do at the end of each lesson. Minutes are an estimate.

  • Lesson 1: The first ten minutes · 7 min

    Before you begin · The quiet laptop · What would you change?

  • Lesson 2: Spotting and reporting · 6 min

    Signs · How to report · Check

  • Lesson 3: What happens next · 6 min

    The team's steps · Why time matters · Try it

  • Lesson 4: Grey areas: pressure, blame and silence · 6 min

    Why people stay silent · What would you do? · Check

  • Lesson 5: Drill: your role · 6 min

    Roles · Tabletop · Check

  • Lesson 6: Your checklist and the final assessment · 4 min

    Next steps · Practice

Claim the template

Common questions

Yes. The course, the live deck and both surveys are free. Claiming the template into your AhaSlides account is free too.

The course itself is self-paced and online, and the live deck lets you add a live session. Whether online delivery meets your local rules depends on the law that applies to you, so check the rules that apply to you or ask your own counsel.

At onboarding, annually and before an incident exercise.

All staff, with an incident-team variant as a note; run by L&D with the security and privacy leads.

Record completion in your own LMS or record system, so you can show who finished the course and when. Check the retention period that applies to you in the rules that apply to you.

Yes, everything. Change the wording, swap scenarios for ones from your workplace, add your logo, or remove parts that don't apply. Keep anything your own law requires you to cover.

Your own details, each highlighted inside the course:
  • The route for reporting a security incident or suspected breach, and the time limit that applies
  • Your data protection officer or privacy lead
  • Link to the next course in your security awareness path
  • Where course completions are recorded
  • Link to the self-paced course
Then edit anything else you like: wording, scenarios, your logo.
Visit the help centre (opens in a new tab)