Cybercrime has become an industry, with ready-made phishing kits and a booming trade in stolen access. This module covers who is targeting South African organisations, what they want, and how the threat picture here is shifting. You come away able to see the risk in everyday decisions and where your own role sits in the organisation's defence.

The modern scam has no spelling mistakes to catch. This module trains your eye for the emails, texts, WhatsApps and calls built to catch you mid-task, and builds the verification habit that matters more than any single red flag. You come away able to check a suspicious request properly without grinding your work to a halt.

Some attacks unfold over days: a friendly caller, a small favour, a request that seems reasonable right up until it isn't. You learn how manipulation is built, who gets targeted and why, and a pause-verify-escalate routine that holds when someone is working hard to rush you.

A cloned voice on a call, a face in a video meeting that isn't real, an invoice that passes every check: AI has pulled the tells out of deception. This module covers the verification steps that still work when your eyes and ears can't be trusted, and the danger of feeding company data into public AI tools. You come away able to check who you're really dealing with.

Most incidents end as data incidents. You learn to recognise what you're handling, from personal information under POPIA to commercially sensitive material, and the everyday habits that stop it leaking through a misaddressed email or an over-shared link. You come away knowing what needs protecting and how to keep it safe.

Work happens on your phone, at home, on café Wi-Fi, through load-shedding. This module covers staying secure across all of it: passwords and MFA that survive a SIM swap, and the mobile-first risks that hit South Africans hardest. You come away able to stay secure wherever the work happens.

When something goes wrong, the first ten minutes decide a lot. You learn what to do, who to tell and what to leave untouched, and you build an incident response playbook for your own role that works the day you finish.

A misaddressed email or an over-shared file can carry real legal consequences. This module covers the practical obligations POPIA places on organisations, the offences the Cybercrimes Act creates, and what should happen when an incident occurs. You come away understanding why prompt internal reporting is what lets your organisation meet its obligations.

Everything in the course comes together in one compound incident at a fictional South African organisation. Over a dedicated two-week window, you work through what happened, produce a written analysis and response plan, and prepare the briefing you would give a simulated executive committee. You finish with proof you can handle a real incident, from the first response to the boardroom.