Kept logoKept

Free staff security training

Ten minutes, five short lessons and a ten-question quiz. Pass with 80% and download a completion certificate for your records. No account needed.

The lessons

  1. 1. Spotting phishing

    • Be suspicious of urgency: "pay today", "your account will close", "the director needs this now".
    • Check the real sender address and hover over links before clicking.
    • Never change bank details or pay a new invoice on the strength of one email — phone a known number to check.
    • Report suspicious messages straight away. Reporting a mistake quickly matters more than blame.

  2. 2. Passwords and multi-factor sign-in

    • Use a long passphrase, such as three random words, and a different one for every account.
    • Use a password manager so you don't have to remember them all.
    • Turn on multi-factor sign-in (a code or app prompt) for email and every work cloud service.
    • Never share passwords or approve a sign-in prompt you didn't start.

  3. 3. Looking after your devices

    • Install updates promptly — most attacks use flaws that already have a fix.
    • Lock your screen whenever you step away.
    • Only install software from official app stores or approved by your manager.
    • Report a lost or stolen phone or laptop immediately so it can be wiped.

  4. 4. Handling personal data

    • Only access the customer or staff data you need for your job.
    • Check the recipient before sending anything containing personal data.
    • Don't store work data in personal email, personal cloud storage or on USB sticks.
    • An email sent to the wrong person is a data breach — tell your manager the same day.

  5. 5. Working away from the office

    • Avoid public Wi-Fi for work, or use your phone's hotspot instead.
    • Keep screens out of view on trains and in cafés.
    • Never leave a laptop unattended in a car or public place.

The quiz

  1. 1. An email from your director asks you to urgently pay a new supplier. What should you do?
  2. 2. Which is the strongest password approach?
  3. 3. Your phone shows a sign-in approval prompt you didn't start. What do you do?
  4. 4. Your laptop asks to install an update. When should you do it?
  5. 5. You emailed a customer list to the wrong person. What next?
  6. 6. Where should you save work documents?
  7. 7. You're working in a café. Which is safest?
  8. 8. A website you need asks you to install a browser add-on. What should you do?
  9. 9. What should you do when leaving your desk for five minutes?
  10. 10. A link in a text claims to be from your bank. What's safest?

Training your team is one part of staying secure. Check your Cyber Essentials readiness or try the GDPR checklist.

Kept is an independent tool, not affiliated with or endorsed by NCSC, IASME or the ICO. This training is general awareness, not a professional qualification.