Cyber Security Awareness Training
Recognise the attacks aimed at ordinary staff, protect your accounts, devices and data, and know exactly what to do when something looks wrong.
14-day money back · Pay once, no subscription
Cyber Security Awareness Training
You can do cyber security awareness training online in the UK with Lift College's Cyber Security Awareness Training course. It is 2 hours of learning in 6 short modules, covering what cyber security is and who the attackers are, phishing and other social engineering, passwords, multi-factor authentication and device security, malware and ransomware, your legal duties when you handle personal data, and how to spot, report and recover from an incident. It costs £19.99, pay once, and your CPD certificate issued by Lift College is ready the same day you pass. Lift College recommends a refresh every 12 months, and the refresher is free.
Most cyber attacks do not break through technology. They go through people: an email that looks like it came from the boss, a text about a missed parcel, a login page that is not quite right, a USB stick found in reception. The government's Cyber Security Breaches Survey 2025 found that 43% of UK businesses identified a cyber security breach or attack in the previous 12 months, and phishing was by far the most common type. One click can hand an attacker your login, lock every file your organisation holds, or leak the personal data of customers, patients or pupils. That leads to lost work, lost money, a report to the Information Commissioner and lost trust.
This course covers the habits that stop the common attacks. You learn how to recognise phishing, smishing and impersonation, how to build strong passwords and use multi-factor authentication, how to keep laptops, phones and home networks safe, what malware and ransomware do and how they get in, what UK GDPR and the Data Protection Act 2018 expect of you when you handle personal data, and who to tell, fast, when you think something has gone wrong. It is written for every member of staff, not IT specialists, in workplaces across the UK.
- Explain what cyber security is, who the attackers are and why ordinary staff are their main target
- Recognise phishing, smishing, vishing and impersonation attempts and check a message before acting on it
- Apply the NCSC's advice on passwords, multi-factor authentication and keeping devices and software up to date
- Describe how malware and ransomware get into an organisation and the signs of an infection
- Identify your duties under UK GDPR Article 32 and the Data Protection Act 2018 when you handle personal data
- Describe what counts as a personal data breach and why it must be reported inside your organisation straight away
- Carry out the right steps when you spot a suspicious message, a lost device or a possible incident
- Explain how Cyber Essentials and the NCSC 10 Steps shape the controls in your workplace
6 short modules, 2 hours in total.
Cyber security and the threat to you
What cyber security means, who attacks organisations and why: criminals after money and data, insiders, and automated attacks that hit any organisation of any size. What a breach costs in work, money, reputation and regulatory action.
Knowledge checkPhishing and social engineering
Phishing emails, smishing texts, vishing calls, QR code scams and spoofed senders. The pressure tactics of urgency, authority and fear, business email compromise and invoice fraud, and the checks to make before you click, pay or reply.
Knowledge checkPasswords, authentication and devices
Three random words, password managers, never reusing passwords, and multi-factor authentication. Locking screens, installing updates, antivirus, public Wi-Fi, USB devices, personal phones and keeping work safe when you work from home.
Knowledge checkMalware and ransomware
Viruses, spyware, trojans and ransomware, how they arrive through attachments, downloads, links and removable media, the signs of an infection, why backups matter and what to do, and not do, when a device is compromised.
Knowledge checkProtecting personal data and the law
UK GDPR Article 32 and the Data Protection Act 2018, what counts as a personal data breach, the 72 hour report to the Information Commissioner, the Computer Misuse Act 1990, acceptable use, sending and storing data securely, clear screens and desks, and disposing of data and devices.
Knowledge checkSpotting, reporting and recovering from an incident
What an incident looks like, who to tell and why minutes matter, your organisation's incident plan, reporting suspicious emails to the NCSC and texts to 7726, Action Fraud and Police Scotland, and how Cyber Essentials and the 10 Steps to Cyber Security fit together.
Knowledge checkFinal test and your certificate
Multiple choice, 80% to pass, unlimited attempts. Your CPD certificate is issued by Lift College the day you pass.
This course is for you if
- You use email, the internet or a shared system as part of your job
- You work from home or on the move with a laptop or phone
- You handle customer, patient, pupil or employee records
- You approve payments, change supplier details or manage accounts
- You manage a team or run a small organisation and need everyone to share the same baseline
Your CPD certificate, issued the day you pass.
Your certificate records that you completed Cyber Security Awareness Training with Lift College. It shows 2 hours of learning, your completion date and a recommended refresh date 12 months on.
- One price, £19.99. One payment, one learner, no subscription.
- Short modules with a knowledge check after each one and a final test. Instant results.
- 80% to pass, with unlimited free retakes.
- A CPD certificate issued by Lift College as a PDF the same day you pass, with a unique number and a verification link.
- Access for as long as Lift College offers the course, and never less than 3 years from the day you buy.
- A free refresher when your recommended refresh date arrives. Changed your mind? Ask within 14 days of paying and we refund you in full.
CPD certificate
liftcollege.co.uk/verify/LC-CPD-000000The law this course supports
UK GDPR Article 32 and the Data Protection Act 2018
Applies across the whole UK. Anyone who processes personal data must put in place appropriate technical and organisational measures to keep it secure, including protecting against unauthorised access, loss and destruction. Staff awareness training is one of the organisational measures the Information Commissioner expects to see.
Read the legislation →ICO guidance on security under the UK GDPR
The Information Commissioner's guidance on what appropriate security means in practice, covering people, processes and technology. It expects staff to understand their responsibilities and organisations to report a personal data breach that risks people's rights within 72 hours of becoming aware of it.
Read the legislation →Computer Misuse Act 1990
Applies across the UK. It makes it a criminal offence to access a computer or data without authorisation, to do so in order to commit another offence, or to impair the operation of a computer, for example by spreading malware. Using a colleague's login or looking at records you have no business reason to see can fall under this Act.
Read the legislation →NCSC Cyber Essentials
The government-backed scheme that sets five basic technical controls: firewalls, secure configuration, security update management, user access control and malware protection. It is not law, but many public sector and larger contracts require suppliers to hold it, and this course explains the user behaviours that support each control.
Read the legislation →NCSC 10 Steps to Cyber Security
The National Cyber Security Centre's guidance for organisations on managing cyber risk. The steps include engagement and training, identity and access management, data security and incident management, which is why staff awareness training sits at the centre of most organisations' cyber security programmes.
Read the legislation →£19.99. Pay once, nothing added.
One payment for one learner. You keep access for as long as Lift College offers the course, and never less than 3 years. Changed your mind? Ask within 14 days and we refund you in full.
- PaySecure card payment, one time only.
- Sign inYour learner account is ready straight away.
- StartBegin module 1 the same minute.
Free refresher when it is due
We recommend a refresh every 12 months. We email you 30 days before, and from the refresh date you can retake the latest version free and download a new certificate.
Buying Cyber Security Awareness Training for a team?
Open a free organisation account, buy places and give each person their own login. Your first place is free with a work email, and the price falls the more places you buy.
Multiple enrolment discounts
The price of a place is set by the places in one order, on this course or any mix of our CPD courses. Saving against the £19.99 single place.
| Places in one order | Price a place | Saving |
|---|---|---|
| Your first place | £0 | Free with a work email |
| 1 to 9 places | £16.99 | 15% off |
| 10 to 49 | £14.99 | 25% off |
| 50 to 99 | £12.99 | 35% off |
| 100 to 249 | £10.99 | 45% off |
| 250 or more | £9.99 | 50% off |
What would your team cost?
Training each person on several courses? A sector pack or the annual plan can cost less. Your quote compares all three for you.
Prefer to talk first? Request a call back
- 1
Your own training portal in 2 minutes
Open a free account with your work email. No sales call, and your first place is free.
- 2
See where everyone stands
A progress dashboard, a training matrix and an Excel progress report for your records.
- 3
Reminders sent for you
Welcome emails, nudges for anyone who stalls, and refresher dates so nobody goes out of date.
- 4
Pay by card or invoice
Card, or invoice on 30-day terms with your PO. Places stay valid for 3 years.
- 5
A human tutor with every course
Real tutor support for your staff, unlimited free retakes and a certificate the day they pass.
- 6
CPD Standards Office accreditation in progress
Provider 51289.
What our learners say
Stories from Lift College learners on our qualifications, in their own words.
“I had been a care assistant for four years without a formal qualification. Lift College made the whole process straightforward, my assessor visited regularly and I completed my Level 3 Diploma in Adult Care in just over a year. I was promoted to senior care worker the month after I qualified.”
“My employer was clear, I needed GCSE English to move into a supervisory role. Lift College helped me find the right exam board and an exam centre five minutes from home. Passed grade 4. Got the promotion.”
“My employer needed me to have Level 2 maths before they could register me on the Level 3 apprenticeship programme. Lift College was fast, the tutor was brilliant, and I resit my maths once after a near-miss and passed the second time. The whole thing took twelve weeks.”
Questions about Cyber Security Awareness Training
Is online cyber security awareness training valid?
Yes. Your employer decides what training staff need, and UK GDPR and the Information Commissioner expect organisations to make staff aware of their security duties. Cyber Essentials and the NCSC 10 Steps both expect user awareness training. This course gives every member of staff the knowledge; your IT team or provider still sets up the technical controls.
Who needs cyber security awareness training?
Anyone who uses a computer, phone, email or a shared system at work, including volunteers, contractors and home workers. Staff who approve payments, change supplier details or handle personal data are the most common targets. Many organisations make it part of induction and repeat it every year.
How often should cyber security awareness training be done?
The law does not fix an interval, but attackers change their methods constantly and most organisations, insurers and Cyber Essentials assessors expect staff to be trained at induction and at least once a year. Lift College recommends refreshing every 12 months, and the refresher is free.
What does this course not cover?
It is not a technical course. It does not teach you to configure firewalls, manage servers or run penetration tests, and it is not a full data protection course. It covers the behaviours every member of staff needs. If you also handle personal data in your role, Lift College's GDPR Training and Data Protection Training go further into the law.
How do I report a phishing email or text?
Do not click any link or open any attachment. Report it to your IT team or manager first, following your organisation's procedure. You can also forward suspicious emails to the NCSC at report@phishing.gov.uk and forward scam texts free to 7726. If you have lost money or given away details, report it to Action Fraud in England, Wales and Northern Ireland or to Police Scotland on 101 in Scotland, and tell your bank straight away.
How long do I keep access?
You keep your access for as long as Lift College offers the course, and never less than 3 years from the day you buy. Your certificate PDF is yours to keep.
What is the free refresher?
Lift College recommends refreshing this course every 12 months. When your date comes round, you can retake the latest version free and get a new certificate. We email you 30 days before.
Does it count towards my CPD?
Yes. The course is 2 hours of learning, shown on your CPD certificate issued by Lift College, so you can log the hours in your CPD record.
Can I get my money back?
Yes. Ask within 14 days of paying and we refund you in full.
Can my employer pay?
Yes. Your receipt shows the course, the date and the amount paid, and you can pass it to your employer. Buying for a team? Open a free organisation account: every course is £16.99, and you can pay by card or invoice with your PO.
Can my team do this course in another language?
Yes, on an organisation account with 10 or more places. Your team can study Cyber Security Awareness Training in Polish, Romanian, Punjabi, Urdu or Welsh, prepared within 1 working day of your order. The final test and the certificate stay in the English course name, so the certificate is the one every employer recognises. Tell us the languages you need when you order or ask for a quote.
Where can I do cyber security awareness training online in the UK?
Lift College offers Cyber Security Awareness Training online for £19.99, pay once. It is 2 hours of learning in 6 short modules, written for workplaces across England, Wales, Scotland and Northern Ireland. Your CPD certificate issued by Lift College is ready the same day you pass.
How long does online cyber security awareness training take?
Cyber Security Awareness Training is 2 hours of learning in 6 short modules, each with a knowledge check. You can finish it in one sitting or across several and pick up where you left off on any device. The final test needs 80% to pass, with unlimited free retakes.
How much does Cyber Security Awareness Training cost online?
Lift College's Cyber Security Awareness Training is £19.99, pay once, with no subscription. Training a team? It is £16.99 a course on a free organisation account.
How is Cyber Security Awareness Training assessed?
By a short knowledge check after each of the 6 modules and a final test. You need 80% to pass, with unlimited free retakes, and your CPD certificate issued by Lift College is ready the same day you pass.
Can I start Cyber Security Awareness Training today?
Yes. You start the moment you pay, on any device, and you can finish the 2 hours of learning in one sitting or across several. Your CPD certificate issued by Lift College is ready the same day you pass. Buying for a team? Open a free organisation account.
GDPR Training
Everyday GDPR for all staff. Handle personal data safely, spot a breach and know what to do next.
Data Protection Training
For managers and data leads. Handle subject access requests, breaches, complaints and data sharing with confidence.
Anti Money Laundering Training
How money laundering works, the checks the 2017 Regulations require, the red flags to watch for and how to report a suspicion. 2 hours, £19.99.