Skip to content

Security Awareness Training templates

45 ready-made templates in Security Awareness Training, including Security awareness essentials, Phishing & social engineering, PCI DSS awareness for card-handling staff. Each one comes with a self-paced course and a live session deck.

45 templates · Templates are a starting point, not legal advice

Templates

  • US federalRequired by law

    Security Awareness Training

    Security awareness essentials

    All employees and contractors

    Covers:
    • Explain why people are the most targeted part of security
    • Describe the stages of a typical attack, from lure to data theft
    • Spot red flags across email, text, phone, web and USB

    Last reviewed Oct 2026Legal basis: FTC Safeguards Rule 16 CFR 314.4(e)

    35 minCourse · Live deck · 2 surveys

  • US federal

    Security Awareness Training

    Phishing & social engineering

    All employees

    Covers:
    • Explain how social engineers exploit trust, urgency and authority
    • Trace the steps of a business email compromise
    • Detect phishing across email, SMS, voice, QR codes and AI deepfakes

    Last reviewed Oct 2026

    30 minCourse · Live deck · 2 surveys

  • GlobalHands-on practical

    Security Awareness Training

    PCI DSS awareness for card-handling staff

    Retail cashiers

    Covers:
    • Explain why card data is targeted and what PCI DSS is
    • Identify cardholder data vs sensitive authentication data
    • Apply allowed vs prohibited card-handling practices

    Last reviewed Oct 2026

    25 minCourse · Live deck · 2 surveys

  • CaliforniaRequired by law

    Security Awareness Training

    California consumer privacy (CCPA/CPRA)

    Customer service

    Covers:
    • Explain who the CCPA protects, who it covers and who enforces it
    • Identify personal information and sensitive personal information
    • Describe consumer rights

    Last reviewed Oct 2026Legal basis: Cal. Civ. Code 1798.100-1798.199.100

    35 minCourse · Live deck · 2 surveys

  • US multi-stateRequired by law

    Security Awareness Training

    US state privacy laws overview

    Privacy

    Covers:
    • Describe the state-by-state privacy landscape
    • Identify common definitions
    • Apply common consumer rights and the key differences between states

    Last reviewed Oct 2026Legal basis: State comprehensive consumer privacy

    35 minCourse · Live deck · 2 surveys

  • US federal

    Security Awareness Training

    Remote work & mobile device security

    Remote and hybrid employees

    Covers:
    • Explain why remote and mobile work expand the attack surface
    • Describe how attacks target home networks, public Wi-Fi and phones
    • Spot red flags

    Last reviewed Oct 2026

    25 minCourse · Live deck · 2 surveys

  • US federalRequired by law

    Security Awareness Training

    Insider threat awareness

    All employees

    Covers:
    • Explain the importance of detecting potential insider threats
    • Recognise potential risk indicators
    • Describe methods adversaries use to recruit trusted insiders

    Last reviewed Oct 2026Legal basis: NISPOM 32 CFR Part 117

    30 minCourse · Live deck · 2 surveys

  • Global

    Security Awareness Training

    Data classification & handling

    All employees

    Covers:
    • Explain why classification protects customers, the company and you
    • Identify the company's classification levels and examples
    • Label, store, share and dispose of data by level

    Last reviewed Oct 2026

    25 minCourse · Live deck · 2 surveys

  • US federalRequired by law

    Security Awareness Training

    Social media & communications policy

    All employees

    Covers:
    • Explain why online posts can affect customers, colleagues
    • Describe policy rules
    • Apply a "before you post" check

    Last reviewed Oct 2026Legal basis: National Labor Relations Act s.7

    25 minCourse · Live deck · 2 surveys

  • United KingdomRequired by law

    Security Awareness Training

    UK: Data protection (UK GDPR & DPA 2018)

    All UK staff

    Covers:
    • Explain why data protection matters and what the regulator can do
    • Identify personal data, special category data and criminal offence data
    • Apply the 7 principles and lawful bases to everyday tasks

    Last reviewed Oct 2026Legal basis: UK GDPR

    35 minCourse · Live deck · 2 surveys

  • European UnionRequired by law

    Security Awareness Training

    EU: GDPR essentials

    All staff

    Covers:
    • Explain the GDPR's purpose, reach
    • Identify personal data, special categories and pseudonymised data
    • Apply the principles, lawful bases and privacy by design to daily work

    Last reviewed Oct 2026Legal basis: Regulation (EU) 2016/679 (GDPR)

    35 minCourse · Live deck · 2 surveys

  • India, Singapore & MexicoRequired by law

    Security Awareness Training

    Singapore: Personal data protection (PDPA)

    All staff

    Covers:
    • Explain why the PDPA matters and the PDPC's enforcement powers
    • Identify personal data, including NRIC numbers
    • Apply the data protection obligations to everyday tasks

    Last reviewed Oct 2026Legal basis: Personal Data Protection Act 2012

    30 minCourse · Live deck · 2 surveys

  • Global

    Security Awareness Training

    Your data and AI tools: What you can and cannot share

    All employees; run by data protection

    Covers:
    • Classify information as public, internal, confidential or personal
    • Choose an approved tool or account type that fits the data
    • Remove or anonymise personal data in prompts and uploads

    Last reviewed Oct 2026

    30 minCourse · Live deck · 2 surveys

  • Global

    Security Awareness Training

    Cyber risk governance for managers and boards

    Executives

    Covers:
    • Explain cyber risk as a business risk the board and leaders own
    • Ask the five questions that show how exposed the organisation is
    • Set a risk appetite and read a small set of cyber measures

    Last reviewed Oct 2026

    40 minCourse · Live deck · 2 surveys

  • Global

    Security Awareness Training

    Ransomware tabletop for managers

    Managers

    Covers:
    • Practise the first-hour decisions in a ransomware incident, as a team
    • Find the gaps in who decides, who is told
    • Leave with a short owner-and-date list of fixes

    Last reviewed Oct 2026

    60 minCourse · Live deck · Survey

  • Global

    Security Awareness Training

    Security culture pulse and discussion

    Whole organisation or a team

    Covers:
    • Measure how confident and safe people feel about reporting
    • Share
    • Agree three actions with owners

    Last reviewed Oct 2026

    10 minCourse · Live deck · Survey

  • Global

    Security Awareness Training

    Cybersecurity quiz: Team rounds

    Teams

    Covers:
    • Recall the everyday habits that protect accounts and data
    • Tell safe from unsafe choices in short workplace situations
    • Know who to contact with a security question or concern

    Last reviewed Oct 2026

    25 minCourse · Live deck

  • Global

    Security Awareness Training

    Cybersecurity awareness month kit: Kick-off session

    Whole organisation; run by the security team

    Covers:
    • Launch the month with a shared aim and a visible calendar
    • Give every team one 10-minute activity a week on a single habit
    • Measure what changed with one end-of-month pulse

    Last reviewed Oct 2026

    20 minCourse · Live deck · Survey

  • Global

    Security Awareness Training

    Cybersecurity awareness month kit: Weekly huddle pack

    Whole organisation; run by the security team

    Covers:
    • Launch the month with a shared aim and a visible calendar
    • Give every team one 10-minute activity a week on a single habit
    • Measure what changed with one end-of-month pulse

    Last reviewed Oct 2026

    10 minCourse · Live deck

  • Global

    Security Awareness Training

    Safe browsing: Fake websites, HTTPS and cookies

    All employees

    Covers:
    • Name the risks of unsafe browsing
    • Recognise a fake or cloned website from its address, contact details
    • Explain what HTTPS and the padlock do and do not prove

    Last reviewed Oct 2026

    35 minCourse · Live deck · 2 surveys

  • Global

    Security Awareness Training

    Physical security and data handling at work

    All staff

    Covers:
    • Follow badge, visitor and contractor access rules
    • Stop tailgating and challenge an unbadged person politely
    • Lock screens and secure devices and documents

    Last reviewed Oct 2026

    35 minCourse · Live deck · 2 surveys

  • Global

    Security Awareness Training

    Information security responsibilities for leaders

    Managers

    Covers:
    • State what leaders must do to support the security and privacy system
    • Explain why leaders join audits and management reviews
    • Recognise social engineering aimed at leaders

    Last reviewed Oct 2026

    35 minCourse · Live deck · 2 surveys

  • Global

    Security Awareness Training

    Bomb threat response: What every workplace team should do

    All employees

    Covers:
    • Describe what to do in the first minutes
    • Explain the difference between a low, moderate and high-risk threat
    • Recognise the main steps of search, evacuation and re-occupation

    Last reviewed Nov 2026

    35 minCourse · Live deck · 2 surveys

  • Global

    Security Awareness Training

    Chemical security awareness: Protecting dangerous chemicals at your site

    Employees

    Covers:
    • Explain why dangerous chemicals need security as well as safety
    • Recognise threats to a chemical site and report suspicious behaviour
    • Describe your own role in protecting chemicals from theft or misuse

    Last reviewed Nov 2026

    35 minCourse · Live deck · 2 surveys

  • Global

    Security Awareness Training

    Your devices and your data: App permissions, tracking and old devices

    All staff using a phone or laptop for work, including BYOD

    Covers:
    • Review and restrict the permissions apps have on my phone or laptop
    • Explain how advertising IDs and data brokers build profiles about me
    • Recognise the risks of tracking tools and spyware

    Last reviewed Nov 2026

    30 minCourse · Live deck · 2 surveys

  • Global

    Security Awareness Training

    Staying safe on and off the job: Personal security for employees

    All employees

    Covers:
    • Decide what level of personal protection suits your role and situation
    • Apply basic situational awareness at work, in public
    • Respond calmly to a confrontation or a suspicious situation

    Last reviewed Nov 2026

    35 minCourse · Live deck · 2 surveys

  • Global

    Security Awareness Training

    Threat reporting and emergency planning in education settings

    School

    Covers:
    • Describe how an anonymous threat is assessed and who is involved
    • Explain why bystander reporting matters
    • List the elements of a stronger emergency plan and how to review it

    Last reviewed Nov 2026

    30 minCourse · Live deck · 2 surveys

  • Global

    Security Awareness Training

    Using cloud storage safely at work

    Office and remote staff

    Covers:
    • Name the four risks of cloud storage
    • Check that a service uses encryption in transit and at rest
    • Apply least privilege to shared folders

    Last reviewed Nov 2026

    25 minCourse · Live deck · 2 surveys

  • Global

    Security Awareness Training

    Managing privacy risk: Getting started with the NIST Privacy Framework

    Small and medium business owners

    Covers:
    • Explain why good cyber security alone does not cover privacy risk
    • Use the Ready, Set, Go phases to start or improve a privacy programme
    • Map data, assess privacy risk and set privacy values and roles

    Last reviewed Nov 2026

    30 minCourse · Live deck · 2 surveys