Cybersecurity Training Programmes
Choose cybersecurity training for employees, departments, management and technical teams. Explore focused one-day programmes, technical courses and ongoing awareness support, with in-house and online delivery options across Malaysia.
Browse cybersecurity courses
| Course | Duration | Description |
|---|---|---|
| All Employees | ||
| Cybersecurity Awareness: Staying Safe in a Digital Workplace | 1 day | One-day cybersecurity awareness course for employees in Malaysia. Phishing, passwords and safe online practice. HRD Corp SBL-Khas claimable, in-house or online. |
| Cybersecurity for Non-IT Staff | 1 day | Cybersecurity awareness training for non-technical staff that covers phishing, passwords, data handling and incident response in Malaysia. |
| Phishing and Social Engineering Awareness Training | 1 day | Phishing and social engineering awareness training in Malaysia: recognise BEC, spear phishing, smishing, vishing and AI-crafted attacks. HRD Corp claimable. |
| Fraud and Scam Prevention Awareness Training | 1 day | One-day fraud and scam prevention training: phishing, WhatsApp scams, business email compromise, invoice fraud, supplier due diligence and NSRC reporting. |
| AI-Powered Scams & Deepfake Awareness | 1 day | Spot impersonation attempts using fake voices, videos, messages and profiles, then verify requests through a trusted channel. |
| Secure AI Use at Work | 1 day | Use approved AI tools without exposing confidential information, accepting unchecked answers or granting unnecessary access. |
| Microsoft 365 Security Awareness | 1 day | Use Outlook, Teams, OneDrive and company accounts more safely, with practical checks for messages, sign-ins and shared files. |
| Ransomware Awareness & Prevention | 1 day | Understand how ransomware disrupts work, reduce everyday exposure and recognise the steps staff should escalate immediately. |
| Data Privacy & Secure Information Handling | 1 day | Handle customer, employee and business information safely when collecting, sharing, storing, printing and disposing of records. |
| Ransomware & BEC Awareness | 1 day | One-day ransomware and Business Email Compromise awareness training in Malaysia: recognise, prevent and respond to both attacks. HRD Corp claimable. |
| Cybersecurity for Remote & Hybrid Workers | 1 day | Protect company accounts, devices and information while working at home, travelling or using approved personal devices. |
| Cloud Security Awareness | 1 day | Make safer decisions about cloud accounts, shared links, uploaded files and third-party applications used in everyday work. |
| Mobile Device & WhatsApp Security | 1 day | Protect phones and messaging accounts, check suspicious requests and respond to lost devices or unfamiliar linked sessions. |
| Passwordless Security & Identity Protection | 1 day | Understand passkeys, MFA and account recovery, and practise safer decisions when a sign-in or identity request appears suspicious. |
| Department-Specific | ||
| Cybersecurity for Finance Teams | 1 day | One-day cybersecurity training for finance and accounts teams in Malaysia: BEC, invoice fraud, phishing, payment verification. HRD Corp claimable. |
| Cybersecurity for HR & Administration | 1 day | Protect employee records, payroll instructions, recruitment information and sensitive administrative documents. |
| Business Email Compromise Prevention | 1 day | Prevent payment diversion through independent verification of executive instructions, supplier bank changes and invoice requests. |
| Supply Chain & Third-Party Cyber Risk | 1 day | Recognise how supplier access, shared data and service outages can create cyber risks for your organisation. |
| CyberSafe for Schools: Internet Safety & Digital Awareness | 1 day | School programme on internet safety, cyberbullying, scams, radicalisation and Malaysian cyber laws for students, teachers and parents. HRD Corp claimable. |
| Management & Board | ||
| Cybersecurity for Executives & Board | 1 day | One-day cybersecurity training for executives and boards in Malaysia: cyber governance, CEO fraud, risk oversight, crisis response. HRD Corp claimable. |
| Cyber Incident Response & Data Breach Management | 1 day | Practise reporting, coordinating and documenting a cyber incident, including the questions that determine personal data breach escalation. |
| Security Incident Tabletop Exercise | 1 day | Rehearse decisions, escalation and communications during a fictional cyber incident, then turn lessons into an owned action plan. |
| Cyber Security Act 2024 Awareness & NACSA Readiness | 1 day | Understand Malaysia's Cyber Security Act, assess which roles may apply and identify the organisational questions that need follow-up. |
| IT & Security Professionals | ||
| Basic Cybersecurity: Fundamentals & Defensive Practices | 1 day | Learn cybersecurity fundamentals including network security, threats, and protection strategies. HRD Corp claimable training in Malaysia. |
| Advanced Cybersecurity & Data Governance: Risk, Compliance & Incident Response | 2 days | Advanced cybersecurity training covering risk management, security governance and compliance frameworks in Malaysia. HRD Corp claimable. |
| Cloud Security Fundamentals | 2 days | Cloud security training for AWS, Azure, and Google Cloud fundamentals in Malaysia covering IAM, encryption, monitoring and compliance. HRD Corp claimable. |
| Incident Response & Digital Forensics | 2 days | Incident response and digital forensics training for Malaysian security teams covering detection, containment, investigation and reporting. |
| CompTIA Security+ (SY0-701) Exam Preparation | 2 days | Two-day CompTIA Security+ SY0-701 exam preparation in Malaysia covering all five exam domains, with practice questions and a scored diagnostic. |
| CompTIA CySA+ (CS0-003) Exam Preparation | 2 days | Two-day CompTIA CySA+ CS0-003 exam preparation in Malaysia: security operations, vulnerability management, incident response and reporting. |
| ISC2 Certified in Cybersecurity (CC) Exam Preparation | 1 day | One-day ISC2 Certified in Cybersecurity exam preparation in Malaysia covering all five domains, with a scored practice assessment and study plan. |
| Certified Ethical Hacker (CEH) Exam Preparation | 2 days | Two-day Certified Ethical Hacker exam preparation in Malaysia: reconnaissance, scanning, system hacking, web, wireless, cloud and AI-assisted attacks. |
| Information Security Management (ISO/IEC 27001) Fundamentals | 1 day | One-day ISO/IEC 27001:2022 fundamentals: ISMS scope, risk assessment, Annex A, the Statement of Applicability and the certification journey. |
| ISO 27001 Internal Auditor | 2 days | Two-day ISO 27001 internal auditor training in Malaysia: audit planning, ISO 19011 technique, evidence gathering and writing nonconformities. |
| ISO 27001 Lead Implementer | 2 days | Two-day ISO 27001 lead implementer training in Malaysia: scoping, risk methodology, Statement of Applicability and the certification roadmap. |
| SOC 1 Fundamentals | 1 day | Understand controls over outsourced financial reporting, Type 1 and Type 2 reports, and the evidence behind a SOC 1 examination. |
| SOC 2 Fundamentals | 1 day | Learn SOC 2 fundamentals: Trust Services Criteria, Type 1 and Type 2 reports, basic controls, evidence and a first readiness checklist. |
| AI Agent Security & Reliability (AIUC-1) Fundamentals | 1 day | One-day AIUC-1 fundamentals training: AI agent risks, the six domains, safeguards, evaluation evidence and responsible deployment decisions. |
| Cybersecurity Risk Management (NIST CSF 2.0) Fundamentals | 1 day | Learn how organisations identify cybersecurity risks and decide what to protect first using NIST CSF 2.0. |
| Information Security Risk Management (ISO/IEC 27005) Fundamentals | 1 day | Learn how to assess information security threats and decide which risks need treatment using ISO/IEC 27005. |
| AI Security Verification (OWASP AISVS) Fundamentals | 1 day | Learn how to check whether an AI-enabled application has appropriate, testable security controls. |
| AI Agent Security (OWASP Agentic Top 10) Fundamentals | 1 day | Learn the main security risks when AI agents can use tools, make decisions and perform tasks independently. |
| Generative AI Security (OWASP LLM Top 10) Fundamentals | 1 day | Learn how to reduce risks from AI chatbots leaking data, following malicious instructions or mishandling their outputs. |
| AI Agent Runtime Security (OWASP Agent Control Standard) Fundamentals | 1 day | Learn how runtime controls can restrict what AI agents access and do within business systems. |
| AI Security Controls (CSA AICM) Fundamentals | 1 day | Learn how to use the Cloud Security Alliance AI Controls Matrix to organise safeguards for AI systems. |
| Web Application Security (OWASP Top 10) Fundamentals | 1 day | Learn how to recognise and reduce common security weaknesses in websites and business applications. |
| Payment Card Data Security (PCI DSS) Fundamentals | 1 day | Learn how businesses handle payment card information securely and understand their PCI DSS responsibilities. |
| Cloud Security (ISO/IEC 27017) Fundamentals | 1 day | Learn how cloud customers and providers share responsibility for securing cloud services and information. |
| AI Agent Protocol Security (OWASP MCP Top 10) Fundamentals | 1 day | Learn how to protect AI connections to documents, databases and tools through Model Context Protocol services. |
| AI Agent Skills Security (OWASP AST10) Fundamentals | 1 day | Learn how to reduce risks from malicious, over-privileged or poorly maintained AI agent skills. |
Build your team’s training pathway
Start with general awareness, choose a role-specific or risk-specific session, and reinforce learning through the managed awareness programme. Finance Teams and Fraud & Scam Prevention already cover payment fraud and business email compromise; choose the department course that matches your team.
For support beyond training, explore Microsoft 365 security assessments, DPO support and incident response planning.
Certificate of Completion
Every participant who completes a full day programme receives an official Certificate of Completion from OrbixTech, demonstrating participation in professional training and compliance awareness.
Frequently Asked Questions
Everyone - not just IT. Non-technical staff are the most common target of phishing and social engineering, so awareness training is designed for the whole workforce, while Fundamentals and Advanced programmes serve IT and security teams.
Awareness programmes are non-technical and use plain language, real Malaysian incidents and practical habits. Fundamentals and Advanced & Governance go deeper for technical and management audiences.
Contact Orbix for claim support. Funding is subject to programme eligibility, employer eligibility and HRD Corp approval; confirm the applicable requirements before booking.
Yes. Our managed awareness programme includes four phishing simulations a year, 12 e-learning modules and monthly management reporting. Agree the campaign scope and reporting measures with Orbix; outcomes depend on your organisation and participation.
At your premises (in-house), at our KL office, or fully online. Our trainers also travel to Sabah, Sarawak and anywhere in Malaysia - travel is quoted separately.
Yes. Sessions can be delivered in English, Bahasa Malaysia, or a bilingual mix depending on your team's preference.
In-house sessions run for groups of 2 to 20 participants, and up to 60 with parallel trainers - so class sizes stay manageable and everyone gets attention.
Comprehensive training materials, scenario case studies and reference guides, plus a Certificate of Completion upon full attendance.