Cybersecurity for HR & Administration Training

Why HR and Administration Are Targeted

Map the records, authority and access held by the function. Identify what an impersonator might request, including applicant information, employee contact details or a change to payroll instructions.

Break

Recruitment Messages and Candidate Files

Review unexpected applications, interview links and document requests. Use approved channels for candidate material, refer suspicious files to support and avoid exposing one applicant's information to another.

Payroll, Bank Changes and Executive Requests

Practise independent verification of employee payment changes and urgent management instructions. Record the approver and the verified channel, and identify when the normal process must be paused.

Lunch

Personnel Records and Access

Apply role-based handling to medical documents, identity records and performance material. Discuss secure sharing with managers and service providers, physical files, retention instructions and confidentiality during staff moves.

Break

Joiners, Movers, Leavers and Reporting

Coordinate access requests and removals with the authorised system owner. Work through an unusual download, a missing file and a lost device, preserving useful details for security and privacy colleagues.

Practical Exercise: Payroll Deadline and a New Bank Account

Handle a fictional employee change request alongside an urgent executive message. Verify authority, identify the records at risk and draft a safe handover between HR, finance and IT.