Portfolio, Cyber security awareness

Cyber security: spot the phish

Cyber security awareness for all staff. A simulated inbox to check and report, and a desk with everyday security slips to find.

Inbox simulationHotspot huntQuiz with feedback
Screen from the Cyber security: spot the phish showcase course, showing the Check this inbox activity

Live demoEvery activity on this page works. Try it below.

Showcase

This is a showcase course we built to show how we work for this sector. The people, organisations and figures in it are invented, and it is not a client project. Your course is built from your content, your policies and your examples.

The brief

What is this course, and who is it for?

This is a showcase course by Apollo Accreditation, the UK and EU course development and accreditation consultancy, built for all staff, from reception to the board. It shows how we design for cyber security awareness, and every activity below works in your browser.

Who it is forAll staff, from reception to the board
FormatSelf-paced, refreshed every six months
Length3 modules, 20 to 30 minutes
Interaction levelLevel 2, Standard, with a simulation

The problem it solves

Phishing is the most common type of attack reported by UK organisations in the government's Cyber Security Breaches Survey. In a busy inbox, a fake invoice looks much like a real one.

Practice on realistic messages, with feedback on the clues.

What learners can do afterwards

  • Spot the signs of a phishing email
  • Report it the right way
  • Protect passwords and devices, at work and at home
  • Know what to do straight away if they clicked
A professional working through a short online course at her kitchen table

The learners

Who takes it, and why do they finish?

Who takes it
All staff, from reception to the board
Who usually buys it
IT manager, information security lead or data protection officer
Where they take it
At a desk, about twenty minutes, twice a year
Why they finish it
It looks like their own inbox, and it is short.

Try it

What does the engagement look like?

These are working copies of activities from the course. Nothing you enter leaves your browser.

Activities tried: 0 of 30 XP

Check this inboxInbox simulation
Inbox simulation. Five messages to open and judge. Feedback points to the exact clue, or explains why a message is genuine.
Clear desk checkHotspot hunt
Hotspot hunt. Seven spots on a desk, four of them security slips, each with a one-line fix.
If you clickedQuiz with feedback
Quiz with feedback. What to do after a click: reporting, passwords, multi-factor authentication.

Inside the course

What do learners see on screen?

Each activity part way through, as a learner sees it after the first choice.

Course map

How is the course structured?

Module by module, with the type of engagement in each and the time it takes.

ModuleWhat learners doEngagementMinutes
Spot the phishCheck a realistic inboxInbox simulation, Level 210
Clear desk, safe homeEveryday slips at the office and at homeHotspot hunt, Level 28
If you clickedReporting, passwords and multi-factor authenticationQuiz with feedback, Level 27

About 25 minutes in total. Levels 1 to 4 are our four eLearning interaction levels. To see which level fits your own module, use the eLearning level finder.

Specification

What is in the specification?

Who takes itAll staff, from reception to the board
Who usually buys itIT manager, information security lead or data protection officer
FormatSelf-paced, refreshed every six months
Length3 modules, 20 to 30 minutes
Interaction levelLevel 2, Standard, with a simulation
EngagementInbox simulation, Hotspot hunt, Quiz with feedback
AssessmentInbox results by message, desk check and quiz, pass mark set by you
CertificateBranded completion certificate when the course runs on our platform, or your platform's own
TrackingSCORM or xAPI package, with completion and scores in your learning platform
AccessibilityCaptions, keyboard navigation and screen reader support built in
LanguagesEnglish in this showcase. Other languages translated and checked by a native speaker
UpdatesEvery six months, with new example messages

How we would build it

How would you get a course like this?

The same five steps for every course, with one named person running your project.

  1. Free course diagnosticSend us the material you have. After a short call we send a written note on what it needs, within a few working days.
  2. Scope and scriptWe pair our learning designers with someone who has worked in your sector. You review and approve the script before anything is built.
  3. BuildBuilt in our own authoring tool, with captions and keyboard navigation included. As a guide, four to six weeks per interactive module.
  4. Test and changeWe test the package on your platform before you sign off. Two rounds of changes are included.
  5. Launch and trackCompletion and scores in your platform, or ours. Want CPD Certification later? It is already built to that standard.

Book a 30 minute scoping call

Evidence

What can you track?

  • Inbox results by message, so you can see which tricks work on your staff
  • Completion and refresher dates
  • Quiz scores by department
  • Before-and-after results when the course is refreshed

Your version

Can you build this with our content?

  • Your branding, your policies and examples from your own workplace
  • SCORM or xAPI for your learning platform, or hosted on ours
  • Captions, keyboard navigation and screen reader support as standard
  • Translated versions for staff or students who work in other languages
  • Built to CPD standard, so it can go forward for CPD Certification when you're ready

See eLearning development and prices

Adapt it

Where else does this course work?

The same design, rewritten for the people and risks of another setting:

  • Schools and colleges
  • Charities
  • Professional services firms
  • Public bodies

Questions

Common questions about this course

Can it use phishing emails we have actually received?

Yes. With personal details removed, real examples from your own inbox make the most convincing practice.

How long would it take to build a course like this?

As a guide, an interactive module takes four to six weeks from when we receive your material, and a straight conversion two to three. This course has 3 modules, so we plan it in stages, and you review each script before we build it.

Will it work on our learning platform?

Yes, in most cases. We hand courses over as SCORM or xAPI packages, which nearly every learning platform accepts, and we test the finished package on your platform before you sign off. If you don't have a platform, it can run on ours.

FreeCourse diagnostic

Send us one course. We'll tell you what it needs, free.

Share one course or programme you already run, or the slides and notes behind it. After a short first call, we review it at no charge and send you a written note on what it needs and which package fits, within a few working days.

  • One course or programme, reviewed by a named person
  • A written note on what it needs
  • The package that fits, so you know where to start
  • No charge and no obligation

Get in touch

Tell us what you want to put online.

Send a short note on the course, who it is for and which platform you use. We will come back with the right option and a fixed price.

Prefer to write instead?

Send an enquiry

Takes about a minute. It reaches us directly.

We use what you send here only to answer your enquiry. See the privacy notice.

We use HubSpot, Google Analytics, Apollo.io, the Meta pixel and the LinkedIn Insight Tag to see which businesses visit and which of our adverts work. Some of this data is processed outside the UK and EU. Nothing is stored on your device until you click OK. Cookie policy