The brief
What is this course, and who is it for?
This is a showcase course by Apollo Accreditation, the UK and EU course development and accreditation consultancy, built for all staff, from reception to the board. It shows how we design for cyber security awareness, and every activity below works in your browser.
The problem it solves
Phishing is the most common type of attack reported by UK organisations in the government's Cyber Security Breaches Survey. In a busy inbox, a fake invoice looks much like a real one.
Practice on realistic messages, with feedback on the clues.
What learners can do afterwards
- Spot the signs of a phishing email
- Report it the right way
- Protect passwords and devices, at work and at home
- Know what to do straight away if they clicked

The learners
Who takes it, and why do they finish?
- Who takes it
- All staff, from reception to the board
- Who usually buys it
- IT manager, information security lead or data protection officer
- Where they take it
- At a desk, about twenty minutes, twice a year
- Why they finish it
- It looks like their own inbox, and it is short.
Try it
What does the engagement look like?
These are working copies of activities from the course. Nothing you enter leaves your browser.
Inside the course
What do learners see on screen?
Each activity part way through, as a learner sees it after the first choice.



Course map
How is the course structured?
Module by module, with the type of engagement in each and the time it takes.
| Module | What learners do | Engagement | Minutes |
|---|---|---|---|
| Spot the phish | Check a realistic inbox | Inbox simulation, Level 2 | 10 |
| Clear desk, safe home | Everyday slips at the office and at home | Hotspot hunt, Level 2 | 8 |
| If you clicked | Reporting, passwords and multi-factor authentication | Quiz with feedback, Level 2 | 7 |
About 25 minutes in total. Levels 1 to 4 are our four eLearning interaction levels. To see which level fits your own module, use the eLearning level finder.
Specification
What is in the specification?
| Who takes it | All staff, from reception to the board |
|---|---|
| Who usually buys it | IT manager, information security lead or data protection officer |
| Format | Self-paced, refreshed every six months |
| Length | 3 modules, 20 to 30 minutes |
| Interaction level | Level 2, Standard, with a simulation |
| Engagement | Inbox simulation, Hotspot hunt, Quiz with feedback |
| Assessment | Inbox results by message, desk check and quiz, pass mark set by you |
| Certificate | Branded completion certificate when the course runs on our platform, or your platform's own |
| Tracking | SCORM or xAPI package, with completion and scores in your learning platform |
| Accessibility | Captions, keyboard navigation and screen reader support built in |
| Languages | English in this showcase. Other languages translated and checked by a native speaker |
| Updates | Every six months, with new example messages |
How we would build it
How would you get a course like this?
The same five steps for every course, with one named person running your project.
- Free course diagnosticSend us the material you have. After a short call we send a written note on what it needs, within a few working days.
- Scope and scriptWe pair our learning designers with someone who has worked in your sector. You review and approve the script before anything is built.
- BuildBuilt in our own authoring tool, with captions and keyboard navigation included. As a guide, four to six weeks per interactive module.
- Test and changeWe test the package on your platform before you sign off. Two rounds of changes are included.
- Launch and trackCompletion and scores in your platform, or ours. Want CPD Certification later? It is already built to that standard.
Evidence
What can you track?
- Inbox results by message, so you can see which tricks work on your staff
- Completion and refresher dates
- Quiz scores by department
- Before-and-after results when the course is refreshed
Your version
Can you build this with our content?
- Your branding, your policies and examples from your own workplace
- SCORM or xAPI for your learning platform, or hosted on ours
- Captions, keyboard navigation and screen reader support as standard
- Translated versions for staff or students who work in other languages
- Built to CPD standard, so it can go forward for CPD Certification when you're ready
Adapt it
Where else does this course work?
The same design, rewritten for the people and risks of another setting:
- Schools and colleges
- Charities
- Professional services firms
- Public bodies
Questions
Common questions about this course
Can it use phishing emails we have actually received?
Yes. With personal details removed, real examples from your own inbox make the most convincing practice.
How long would it take to build a course like this?
As a guide, an interactive module takes four to six weeks from when we receive your material, and a straight conversion two to three. This course has 3 modules, so we plan it in stages, and you review each script before we build it.
Will it work on our learning platform?
Yes, in most cases. We hand courses over as SCORM or xAPI packages, which nearly every learning platform accepts, and we test the finished package on your platform before you sign off. If you don't have a platform, it can run on ours.
Portfolio
More showcase courses
FreeCourse diagnostic
Send us one course. We'll tell you what it needs, free.
Share one course or programme you already run, or the slides and notes behind it. After a short first call, we review it at no charge and send you a written note on what it needs and which package fits, within a few working days.
- One course or programme, reviewed by a named person
- A written note on what it needs
- The package that fits, so you know where to start
- No charge and no obligation
Get in touch
Tell us what you want to put online.
Send a short note on the course, who it is for and which platform you use. We will come back with the right option and a fixed price.
Prefer to write instead?
Send an enquiry
Takes about a minute. It reaches us directly.
We use what you send here only to answer your enquiry. See the privacy notice.



