Cybersecurity for Finance Teams
Finance teams are among the most targeted groups in any organisation. Attackers know that accounts payable staff, CFOs, and treasury teams have access to payment systems, vendor records, and sensitive financial data, and they design their attacks accordingly. This 1-day programme equips finance professionals with the knowledge to spot and stop the attacks most likely to hit them.
Finance is the function attackers target most directly, because it is where payment authority sits, and the programme is built around that exposure rather than around general security hygiene. Coverage includes payment fraud and invoice redirection, vendor bank detail changes and the verification discipline that stops them, executive impersonation, and the segregation of duties that limits damage when a control fails. The session also covers the finance team's role in incident response, since finance usually detects fraud before IT detects the intrusion that enabled it.
Participants leave with practical skills to identify Business Email Compromise attempts, verify suspicious payment requests, protect financial data, and respond correctly when fraud is suspected.
HRD Corp SBL-Khas Claimable
Programme Agenda
8:30 AM - 9:00 AM
Registration & Welcome
Participant registration, programme overview, and learning objectives for the day.
9:00 AM - 10:15 AM
Why Finance Teams Are Targeted
The financial fraud threat landscape in Malaysia; how attackers research and profile finance staff; attack economics and return on investment for criminals; real incident examples from Malaysian businesses.
10:15 AM - 10:30 AM
Break
10:30 AM - 12:00 PM
Business Email Compromise & Invoice Fraud
Anatomy of a BEC attack; payment diversion scams; fake vendor emails and supplier impersonation; CEO fraud targeting accounts teams; invoice manipulation techniques; how to build and apply a payment verification workflow.
12:00 PM - 1:00 PM
Lunch
1:00 PM - 2:15 PM
Phishing, Vishing & Social Engineering for Finance
Targeted spear phishing on finance staff; CFO and executive impersonation; phone-based fraud and urgency tactics; how attackers exploit end-of-month pressure; verifying unusual requests through secondary channels.
2:15 PM - 3:15 PM
Secure Financial Practices & Data Protection
Safe banking portal practices; access controls for financial systems; protecting financial records; PDPA obligations when handling customer and employee financial data; vendor onboarding security checks.
3:15 PM - 3:30 PM
Break
3:30 PM - 4:15 PM
When Fraud Is Suspected
Immediate steps when a fraudulent payment request is identified; how to pause or reverse a payment in progress; internal escalation procedures; reporting to PDRM, Bank Negara Malaysia, and your bank; preserving evidence.
4:15 PM - 4:45 PM
Assessment
Individual written assessment. 70% pass mark required. One resit permitted within 14 days.
4:45 PM - 5:00 PM
Closing Remarks & Certificate Presentation
Programme wrap-up, open Q&A, and certificate presentation.
Key Outcomes
- Recognise the most common cyber attacks targeting finance and accounts functions
- Identify BEC and invoice fraud attempts before authorising payments
- Apply a payment verification workflow for unusual or high-value requests
- Protect sensitive financial data in line with PDPA obligations
- Know the immediate steps to take when fraud is discovered or suspected
Training Mode Physical / Online / Hybrid / e-learning
HRD Corp SBL-Khas Claimable
Level Foundational, suitable for all finance staff regardless of technical background
Duration 1 Day | 8:30 AM - 5:00 PM
Venue Kuala Lumpur, Malaysia, or in-house at client's premises
Assessment Written knowledge check, 70% pass mark. One resit within 14 days.
Certificate Certificate of Completion issued by Orbix Tech Sdn Bhd upon successful assessment and full attendance
Includes Training materials, workbook, assessment, and Certificate of Completion. Participants responsible for travel and accommodation.