Full-Day Classroom Seminar
Cyber Security , Phishing, & AI threats.
Recognise the signals, stop the click and respond confidently to phishing, social-engineering and AI-assisted threats.
A practical cybersecurity awareness programme focused on phishing, social engineering, email and mobile attacks, executive impersonation, ransomware, third-party risk, AI-assisted impersonation and incident reporting.
The Programme
Programme Overview
Introduction
Course Overview
Cyber attackers increasingly rely on human behaviour to gain access to organisations. Phishing and social engineering attacks exploit urgency, fear, authority, curiosity, trust and reward to persuade employees to click links, share credentials, approve payments or disclose sensitive information.
This programme helps employees recognise how phishing attacks work and identify suspicious signals across email, collaboration platforms, mobile messages and phone calls. It also addresses more advanced threats such as CEO fraud, Business Email Compromise, ransomware, vendor impersonation and AI-assisted impersonation and highly personalised messages.
Participants learn a simple and practical response approach—STOP → CHECK → VERIFY → REPORT—and understand what to do when a suspicious link is clicked, a fraudulent request is received or an incident needs to be escalated.
Outcomes
What You Will Learn
- Understand phishing, spam and social engineering and how they differ.
- Understand why phishing remains a major organisational risk.
- Recognise common attacker objectives including credential theft, financial fraud, malware delivery, data theft and unauthorised access.
- Understand the phishing attack lifecycle and common attacker techniques.
- Identify psychological triggers such as urgency, fear, authority, curiosity, trust and reward.
- Spot suspicious sender addresses, display-name spoofing and look-alike domains.
- Identify malicious links, URL manipulation, attachments and credential-harvesting pages.
- Recognise QR-code phishing, Business Email Compromise and invoice/payment phishing.
- Identify phishing through Teams, Slack, Google Chat, WhatsApp, SMS and other communication channels.
- Recognise CEO fraud, executive impersonation, vendor impersonation and AI-assisted highly personalised attacks.
Methodology
How We Teach
- Realistic phishing scenarios and workplace examples.
- “Spot the Phish” exercises to classify messages as Legitimate, Suspicious or Phishing.
- Analysis of email sender details, links, domains, attachments and security indicators.
- Scenario-based practice involving urgent manager, IT, HR and finance requests.
- Mobile-message analysis covering Smishing, Quishing and suspicious applications.
- Case studies covering CEO fraud, ransomware and compromised vendor accounts.
- Practical response exercises using STOP → CHECK → VERIFY → REPORT.
- Quiz-based reinforcement of key awareness and response behaviours.
The Outcome
Impact & Audience
For the Organization
Organizational Impact
- Strengthen employee awareness of phishing and social-engineering risks.
- Reduce the likelihood of credential theft, fraudulent payments and unauthorised access.
- Improve recognition of suspicious communications across email, chat and mobile channels.
- Strengthen preparedness against CEO fraud, Business Email Compromise and ransomware entry points.
- Increase awareness of vendor and third-party communication risks.
- Improve incident reporting, escalation and evidence-preservation practices.
For the Individual
Personal Impact
- Build confidence in identifying suspicious emails, messages and requests.
- Learn to recognise manipulation through urgency, authority, fear and trust.
- Develop the habit of independently verifying unexpected requests.
- Know what to do before clicking links, opening attachments or approving payments.
- Understand how AI-assisted impersonation can make fraudulent messages more personalised and convincing.
- Know what steps to take if a phishing link is clicked or an incident occurs.
Audience
Who Should Attend
- All Employees: To build practical awareness of phishing, social engineering and everyday cyber risks.
- Finance & Accounts Teams: To recognise payment fraud, invoice phishing and fraudulent approval requests.
- HR & Administration Teams: To identify fake HR, IT-support and confidential requests.
- Managers & Executives: To recognise executive impersonation, CEO fraud and authority-based attacks.
- Procurement & Vendor Teams: To identify vendor impersonation, fake invoices and payment-change requests.
- Customer-Facing & Operations Teams: To recognise suspicious communication across email, chat, mobile and phone channels.
Curriculum
Course Outline
Session 1: Phishing & Social Engineering Fundamentals
- Understand phishing, spam and social engineering and how they differ.
- Understand why phishing remains a major organisational risk.
- Explore common attacker objectives including credential theft, financial fraud, malware delivery, data theft and unauthorised access.
- Understand the phishing attack lifecycle and common attacker techniques.
- Recognise psychological triggers such as urgency, fear, authority, curiosity, trust and reward.
- Practise identifying the psychological trigger behind common phishing scenarios.
Session 2: Email, Chat & Mobile Phishing Attacks
- Identify suspicious sender addresses, display-name spoofing and look-alike domains.
- Recognise malicious links, URL manipulation, attachments, credential-harvesting pages and QR-code phishing.
- Understand Business Email Compromise, invoice/payment phishing and fake password-reset notifications.
- Recognise phishing through Teams, Slack, Google Chat and internal messaging platforms.
- Identify Smishing, WhatsApp scams, malicious QR codes, fake applications and shortened URLs.
- Practise analysing sample emails and mobile messages as Legitimate, Suspicious or Phishing.
Session 3: Advanced Threats, AI Impersonation & Ransomware
- Understand CEO fraud, executive impersonation and Business Email Compromise.
- Identify fake finance requests, payment approvals, confidential requests and IT/HR escalation impersonation.
- Recognise AI-assisted impersonation and highly personalised messages.
- Understand how phishing can become an entry point for ransomware and malware.
- Trace the attack chain from phishing and credential theft or malware through initial access, lateral movement, data access and encryption/extortion.
- Analyse a ransomware scenario and identify the business impact of a successful attack.
Session 4: Third-Party Risk, Prevention, Response & Reporting
- Understand third-party and supply-chain phishing risks, including vendor impersonation and compromised supplier accounts.
- Recognise fake invoices, payment-change requests, procurement communication fraud and trusted-domain abuse.
- Apply the STOP → CHECK → VERIFY → REPORT approach to suspicious communications.
- Verify senders and links and independently validate unexpected requests.
- Understand what to do after clicking a phishing link, including incident reporting, escalation and evidence preservation.
- Apply the correct response behaviours through case studies, scenarios and a final knowledge quiz.
Faculty & Inclusions
Your Trainer
Faculty
Instructors Details
Faculty details will be shared as per the programme faculty assigned for the training. The programme requires practical expertise in cybersecurity awareness, phishing, social engineering, incident response and workplace security behaviour.
What's Included
Certificates & Inclusions
- Certificate and programme inclusions as per the applicable training format.
- Practical phishing and social-engineering awareness exercises.
- Sample email, chat and mobile-message analysis.
- Scenario-based CEO fraud and ransomware exercises.
- Third-party and vendor-risk case study.
- Phishing response and reporting practice.
- Quiz for knowledge reinforcement.
Registration
Reserve Your Seat
Need assistance? Our programme advisors are here to help.
Get in TouchNeed Assistance?
Talk to a Programme Advisor
Have questions about your specific industry, or want to enquire about group discounts? Reach out to our programme coordinators directly.
Or register by e-mail
register@princetonacademy.co.inFor Teams
Corporate In-House Training
Have a large HR and Finance team? Standardize your compliance across all locations by training your entire team at once.
Request a Custom In-House ProposalSchedule
Upcoming Cyber Security , Phishing, & AI threats. Sessions
Questions
Frequently Asked Questions
The programme focuses on recognising and responding to phishing, social engineering, communication-based attacks, executive impersonation, ransomware-related phishing, third-party risks and AI-assisted impersonation.
Yes. Participants examine sender addresses, display names, look-alike domains, URLs, attachments, branding, security indicators and other characteristics of suspicious messages.
Yes. It covers Microsoft Teams, Slack, Google Chat, internal messaging, SMS, WhatsApp, QR codes, mobile applications and social-engineering attacks through phone calls.
The programme addresses AI-assisted impersonation and highly personalised messages as part of advanced urgency- and authority-based attacks.
The programme covers the immediate response process, incident reporting and escalation, evidence preservation and following security-team instructions.
