Short course
Online security
Almost all security incidents have nothing to do with a technical exploit. They start with a click on a link, an attachment opened too quickly, a reused password, a phone call from a fake technician, a lost phone with no lock code. The most exploited weakness is not the software, it is habit.
- Duration
- 2 days, 6 hours
- Format
- In person or online
- Credential
- Certificate of attendance
Tuition30,000 XOF
By the end of the programme, you will be able to
- Understand the main threats and how attackers really operate
- Create and manage strong passwords without having to memorise them
- Enable and use two-step verification on your essential accounts
- Recognise a fraudulent email, message or call before reacting
- Secure your computer and phone, including in case of loss or theft
- Browse and connect safely, especially on public networks
- Back up your data with a simple rule you can actually keep to
- Protect the personal data of others that you are responsible for
- React correctly in the first minutes of an incident
- Raise awareness among your colleagues and those around you
Who it is for
Target audience
The course is for everyone, and especially for people who handle data on behalf of others: NGO and association staff, monitoring and evaluation officers, administrative and accounting staff, journalists, teachers, online sellers, entrepreneurs, heads of organisations.
Prerequisites
Only one requirement:
- Be able to use a computer or phone in daily life. No technical knowledge is required, and no IT vocabulary is assumed
Participants are advised to bring the computer and phone they actually use, as part of the exercises consists of configuring their own devices and accounts during the session.
Detailed program
2 sessions · 6 h of teaching
- Who attacks, why, and why no one is too small to be targeted
- Overview of threats: phishing, ransomware, spyware, CEO fraud, identity theft
- Social engineering: how people are manipulated rather than machines
- The psychological levers exploited: urgency, authority, fear, greed, curiosity
- Passwords: what really makes them strong, length versus complexity
- Why reusing a password is the most costly mistake
- Massive data leaks and how to check whether an account has been compromised
- Password managers: principle, installation, hands-on practice
- Two-step verification: the different methods and their real level of protection
- Hands-on activation of two-step verification on each participant's accounts
- Recovery codes and where to keep them
- Recognising a fraudulent email: sender, real link address, tone, mistakes, attachment
- Recognising fraud by text message or social media, very common locally
- Fake technician and fake customer service phone scams
- Mobile money transfer scams and fake winnings
- What to do after clicking: the first five steps
- Practical exercise: sort a series of twenty real messages into legitimate and fraudulent
- Securing your computer: locking, sessions, updates, antivirus, firewall
- Why updates are not a chore but the first line of protection
- Pirated software and the real risk it poses to the organisation's data
- Securing your phone: code, biometrics, encryption, remote location and wipe
- Mobile app permissions and what to clean up
- Public networks and the minimum precautions to take
- Virtual private networks: what they really protect and what they do not
- Browsing with peace of mind: recognising a safe site, being wary of downloads, managing extensions
- Encrypting a file or a USB drive, in practice
- The backup rule: three copies, two media, one off-site
- Setting up an automatic backup you can really keep to
- Other people's personal data: consent, minimisation, retention period
- Anonymising a beneficiary database before sharing or publishing it
- Sharing sensitive files: what should never be sent through ordinary messaging
- The organisation's responsibility and data protection obligations
- Responding to an incident: isolate, alert, document, restore, learn
- Drafting a simple security charter for your team
- Practical exercise: fully configure your own phone and computer, then draft your department's charter
Assessment and certification
There is no final assessment. A training attestation is given to each participant at the end of the second day, issued by Waaldé Impact and signed by the trainer.
Upcoming sessions
Next dates being prepared
Leave your email: we will let you know as soon as registration opens.
Frequently asked questions
30,000 XOF per participant. Training for a team or an organisation is quoted on request.
2 days, 6 hours.
Yes: you can attend onsite or online, as you prefer.
Only one requirement: be able to use a computer or phone in daily life. No technical knowledge is required, and no IT vocabulary is assumed ; participants are advised to bring the computer and phone they actually use, as part of the exercises consists of configuring their own devices and accounts during the session.
A certificate of attendance is issued at the end of the course.
Fill in the online enrolment request: no payment is taken on the site. The firm reviews your application, then contacts you to confirm your place and the payment terms. No session is scheduled yet: leave your email on this page to be told when registration opens.
Join the next cohort
Cohorts are deliberately small to guarantee genuine individual support. Reserve your place or ask us your questions.