Microsoft 365 Security Awareness Training

A one-day awareness course for Microsoft 365 users. Participants work through fictional email, meeting, sign-in and sharing requests, using the organisation's approved procedures. Demonstrations are adapted to the tenant's available features and policies; no administrator access is required from attendees.

Who should attend: Employees and team leaders using Outlook, Teams, OneDrive or SharePoint. No prior cybersecurity qualification is required.

HRD Corp Training Provider Malaysia HRD Corp claim support available

Programme Focus

This is employee awareness for daily use. Microsoft 365 Productivity & Copilot teaches working skills, while the separate security assessment service reviews and hardens the tenant.

Related advisory support: Microsoft 365 Security Assessment. Contact Orbix to discuss your organisation's requirements.

Programme Agenda

01

9:00 AM to 10:00 AM

Your Account and Your Organisation's Settings

Identify legitimate sign-in routes, approved devices and the support contact. Discuss how organisational settings and licences affect available protections, and which changes staff should request rather than make themselves.

02

10:00 AM to 10:15 AM

Break

03

10:15 AM to 11:30 AM

Suspicious Messages and Invitations

Review email, meeting and Teams examples requesting a login, file download or urgent action. Verify the sender and purpose through an established channel, and practise the approved reporting route.

04

11:30 AM to 12:30 PM

Sign-In Protection and Unexpected Prompts

Recognise requests for authentication codes and unexpected approval prompts. Follow approved MFA or passkey enrolment and recovery instructions, and escalate prompts that do not match an action the employee initiated.

05

12:30 PM to 1:30 PM

Lunch

06

1:30 PM to 2:45 PM

OneDrive and SharePoint Sharing

Review recipients, permissions and link settings in a demonstration workspace. Discuss external access, sensitive attachments and the owner of a shared file. Check that intended collaboration does not expose unrelated material.

07

2:45 PM to 3:00 PM

Break

08

3:00 PM to 4:00 PM

Teams, Devices and Reporting Mistakes

Work through guest meetings, downloaded files, lost devices and an accidentally shared document. Identify the immediate internal report and the information needed to help an authorised administrator respond.

09

4:00 PM to 5:00 PM

Practical Exercise: A Collaboration Request Goes Wrong

Review a fictional shared-document invitation and unusual sign-in prompt. Choose a safe verification path, identify the permission issue and draft a concise support report with no passwords or authentication codes.

Key Outcomes

  • Recognise suspicious Microsoft 365 requests
  • Follow approved sign-in protection procedures
  • Check file-sharing recipients and permissions
  • Escalate account and collaboration concerns

Training Mode   Physical / Online / Hybrid

HRD Corp   Subject to programme eligibility and HRD Corp approval

Level   Fundamentals / Beginner. No prior cybersecurity experience required.

Duration   1 Day | 9:00 AM to 5:00 PM (6.5 learning hours, excluding breaks)

Venue   In-house at the client's premises, or delivered via the client's preferred platform (Microsoft Teams, Zoom, or equivalent)

Assessment   Group case exercise and a 10-question knowledge check

Certificate   Orbix Certificate of Completion upon full attendance; not a professional certification

Enquiries   Contact us to register or discuss scheduling

Malaysia Relevance

Relevant to Malaysian organisations using Microsoft 365 for staff and customer information. Exercises connect account protection and collaboration habits to internal security and privacy responsibilities.

Practical Takeaways

A Microsoft 365 user-security checklist and suspicious-request reporting worksheet.

Download a sample practice worksheet (TXT). This fictional exercise is a preview of the learning approach. About Orbix; contact us to confirm the facilitator and relevant experience for your delivery.

Course Completion and Next Steps

Participants receive an Orbix Certificate of Completion upon full attendance. This introductory programme does not confer a professional qualification, certify an organisation, or replace organisation-specific technical, legal or regulatory assessment.

Frequently Asked Questions

One day, from 9:00 AM to 5:00 PM, with 6.5 learning hours excluding lunch and two breaks.

Employees and team leaders using Outlook, Teams, OneDrive or SharePoint. No prior cybersecurity qualification is required.

Participants receive an Orbix Certificate of Completion upon full attendance. This introductory programme does not confer a professional qualification, certify an organisation, or replace organisation-specific technical, legal or regulatory assessment.

A Microsoft 365 user-security checklist and suspicious-request reporting worksheet.

Yes. Physical, online and hybrid delivery can be arranged for an in-house group. Contact Orbix to discuss dates, fees and delivery requirements.

Contact Orbix for programme details and claim support. Funding is subject to programme eligibility, employer eligibility and HRD Corp approval; confirm the applicable requirements before booking.

Related Fundamentals Training

Microsoft 365 Productivity & Copilot. Microsoft 365 Security Assessment. View all fundamentals programmes

Reference material: Microsoft: security features and settings.