Passwordless Security & Identity Protection Training
A one-day fundamentals programme for employees and the teams supporting account adoption. Participants learn why account protection involves enrolment, daily sign-in, recovery and offboarding, and practise following approved instructions without sharing authentication secrets.
Who should attend: Employees, team leaders, onboarding staff, service-desk liaison staff and business account owners. No prior cybersecurity qualification is required.
HRD Corp claim support available
Programme Focus
This programme focuses on user decisions throughout the account lifecycle. It does not promise a tenant-wide passwordless rollout; Microsoft 365 awareness applies related habits to that product environment.
Programme Agenda
9:00 AM to 10:00 AM
Identity and Account Takeover in Plain Language
Separate identity, authentication and permission to perform a task. Review a fictional account journey and identify where an impostor might try to enrol, sign in, request recovery or obtain additional access.
10:00 AM to 10:15 AM
Break
10:15 AM to 11:30 AM
Passwords, MFA and Passkeys
Explain the purpose of additional verification and introduce passkeys and security keys. Discuss why different methods have different protections, and why a stronger sign-in method does not remove every account or session risk.
11:30 AM to 12:30 PM
Approved Enrolment and Daily Sign-In
Walk through the questions to check before enrolling a method: legitimate service, approved device and account ownership. Recognise unexpected prompts and avoid sharing codes or approving a sign-in someone else initiated.
12:30 PM to 1:30 PM
Lunch
1:30 PM to 2:45 PM
Recovery, Device Changes and Support Requests
Plan for a lost device or a change of role using the organisation's verified support route. Discuss how weak recovery or an unverified help request can undermine otherwise strong authentication.
2:45 PM to 3:00 PM
Break
3:00 PM to 4:00 PM
Access Reviews and Offboarding
Identify who approves access and who removes it after a staff or supplier change. Review shared accounts, stored sessions and unnecessary permissions, then route technical changes to the authorised owner.
4:00 PM to 5:00 PM
Practical Exercise: An Unexpected Account Recovery Request
Handle a fictional support message and sign-in prompt. Verify the request independently, identify unsafe recovery steps and draft a user-facing identity protection checklist.
Key Outcomes
- Explain passwords, MFA and passkeys at an introductory level
- Recognise suspicious sign-in and recovery requests
- Follow approved enrolment and device-change procedures
- Identify permission and offboarding questions
Training Mode Physical / Online / Hybrid
HRD Corp Subject to programme eligibility and HRD Corp approval
Level Fundamentals / Beginner. No prior cybersecurity experience required.
Duration 1 Day | 9:00 AM to 5:00 PM (6.5 learning hours, excluding breaks)
Venue In-house at the client's premises, or delivered via the client's preferred platform (Microsoft Teams, Zoom, or equivalent)
Assessment Group case exercise and a 10-question knowledge check
Certificate Orbix Certificate of Completion upon full attendance; not a professional certification
Malaysia Relevance
Relevant to Malaysian organisations introducing stronger authentication across staff and cloud accounts. Examples use demonstration accounts; passkey availability, supported devices and recovery rules depend on the actual service and employer policy.
Practical Takeaways
An account-protection lifecycle checklist and recovery-request verification worksheet.
Download a sample practice worksheet (TXT). This fictional exercise is a preview of the learning approach. About Orbix; contact us to confirm the facilitator and relevant experience for your delivery.
Course Completion and Next Steps
Participants receive an Orbix Certificate of Completion upon full attendance. This introductory programme does not confer a professional qualification, certify an organisation, or replace organisation-specific technical, legal or regulatory assessment.
Frequently Asked Questions
Related Fundamentals Training
Microsoft 365 Security Awareness. Cybersecurity Awareness. View all fundamentals programmes
Reference material: NCSC: passkeys and traditional sign-in methods. CISA: require multifactor authentication.