Cybersecurity · Advanced level

Advanced level · Module 5: Data Protection, Ethics and Security Culture · Lesson 3 of 4

Designing an Awareness Programme

Plan a year of activities that build secure habits.

In this lesson you will

  • Design a 12-month awareness programme
  • Target messages to roles and risks

Key concepts

audiencesrole-based trainingcampaignsmeasuring change

The lesson

Base the programme on the risk register: if phishing and account takeover are top risks, focus there.

Tailor content: finance staff need payment-fraud training, managers need incident decision training, field staff need device and travel security.

Mix formats — short sessions, posters, messages, quizzes — and measure behaviour change.

Step by step

  1. Pick top risks.
  2. Identify audiences.
  3. Plan monthly activities.
  4. Choose measures.

Practice activity

Design the 12-month awareness programme.

Expected result: A risk-based, role-targeted programme with measures.

Check your understanding

  1. What should guide awareness topics?

    Show answer

    The organisation's top risks.

  2. Why tailor training to roles?

    Show answer

    Different roles face different threats.

Taught live by an instructor — online or in person. Free course lessons are for self-study and do not lead to a certificate — see registration options.