Advanced level · Module 5 of 6 · 20 guided hours
Data Protection, Ethics and Security Culture
Protect personal data, act ethically as a security professional and build a lasting security culture.
Learning objectives
- Apply data protection principles to organisational data
- Act according to professional ethics
- Design an awareness programme
- Run phishing simulations ethically
Topics
- data protection principles
- data mapping
- professional ethics
- awareness programmes
- ethical phishing simulations
- culture measures
Lessons
-
Lesson 1 Data Protection Principles
Handle personal data lawfully, fairly and securely.
purpose limitationdata minimisationsecurity and retentiondata mapping
-
Lesson 2 Professional Ethics
Act with integrity when you have powerful access and sensitive knowledge.
integrityconfidentialityprivacy of usersconflicts of interest
-
Lesson 3 Designing an Awareness Programme
Plan a year of activities that build secure habits.
audiencesrole-based trainingcampaignsmeasuring change
-
Lesson 4 Ethical Phishing Simulations
Use simulations to teach, not to trap or shame.
approval and transparencyrealistic but fair luresteachable momentsno blame
Practical activity
Map personal data for the case NGO, apply data protection principles and design a 12-month awareness programme.
Expected outcomes
- Responsible handling of personal data
- A sustainable awareness programme
Assessment
Data map, programme design and ethics reflections assessed.
Taught live by an instructor — online or in person. Free course lessons are for self-study and do not lead to a certificate — see registration options.