Phishing and Social Engineering Awareness Training

A focused one-day training designed to equip all employees with the practical skills to recognise, avoid, and correctly respond to phishing attacks and social engineering threats. Unlike broad cybersecurity awareness programmes, this training goes deep on the most common and costly attack vector facing organisations today, training participants to slow down, think critically, and make the right call under realistic pressure.

Participants will develop sharp, applicable instincts for spotting phishing attempts including AI-crafted messages, business email compromise, spear phishing, smishing, vishing, and social engineering manipulation. They will leave knowing exactly what to do, and what not to do, when a suspicious message lands in their inbox or on their phone.

HRD Corp Training Provider Malaysia HRD Corp SBL-Khas Claimable

Programme Agenda

01

9:00 AM - 9:45 AM

Why Phishing Works: The Human Factor

How attackers exploit urgency, authority, fear, and trust to bypass rational thinking, with real Malaysian incident examples.

02

9:45 AM - 10:45 AM

Types of Attacks and How They Are Built

Phishing, spear phishing, whaling, clone phishing, smishing, vishing, quishing, pretexting, and BEC. How AI is now used to craft convincing attacks at scale.

03

11:00 AM - 12:00 PM

Spotting the Attack: Practical Detection Skills

Hands-on exercise identifying red flags in real and simulated phishing messages, including spoofed senders, fake links, and malicious attachments.

04

1:00 PM - 2:00 PM

Business Email Compromise and Impersonation Attacks

How attackers impersonate executives, vendors, HR, and IT, including deepfake voice and video. Group discussion using the Arup USD25 million deepfake case (2024).

05

2:00 PM - 3:00 PM

Safe Behaviour in Practice

Clear decision-making process for suspicious messages, links, attachments, and QR codes, with three realistic workplace scenario exercises.

06

3:15 PM - 4:15 PM

Reporting, Responding, and Limiting Damage

How to report correctly, what to do immediately after a click, and a group simulated incident response exercise.

07

4:15 PM - 5:00 PM

Building a Phishing-Resistant Mindset

Key habits, the role of every employee in reducing human risk, and how phishing simulation campaigns measure behaviour change over time.

Key Outcomes

  • Identify phishing, spear phishing, BEC, smishing, vishing, and quishing attacks in real workplace contexts
  • Recognise the psychological manipulation tactics attackers use to bypass rational thinking
  • Understand how AI is being used to make phishing attacks more convincing and harder to detect
  • Apply a clear decision-making process when faced with a suspicious message, link, or attachment
  • Report suspected phishing correctly and take immediate action if a link has been clicked
  • Contribute actively to reducing their organisation's human risk exposure

Training Mode   Physical / Online / Hybrid / e-learning

HRD Corp   SBL-Khas Claimable

Level   Beginner, no prior technical knowledge required

Duration   1 Day (8 Hours)  |  9:00 AM - 5:00 PM

Venue   Online session or in-house training at client's premises

Includes   Training materials and Certificate of Completion

Certificate   Certificate of Completion awarded upon full attendance

Frequently Asked Questions

Phishing and Social Engineering Awareness Training runs for 1 day (8 hours) | 9:00 AM - 5:00 PM. It is delivered as an in-house closed group session, so the schedule can be adjusted to fit your team's working hours.

Yes. Delivery options are physical, online, hybrid, e-learning. In-house sessions run at your premises anywhere in Malaysia, online sessions run live over video conference, and hybrid combines both for teams split across sites.

Certificate of Completion awarded upon full attendance. Each certificate carries a certificate number that can be checked at orbixtech.my/certificate-verify.

Level: Beginner, no prior technical knowledge required. The session is built around worked examples and group exercises rather than theory, so participants apply the material to their own organisation during the session.

Yes. This course is also available through the Orbix LMS and e-learning platform, where participants work through the material on their own schedule and device rather than attending one fixed session. A knowledge assessment and certificate on completion work the same way as the instructor-led session.

Minimum 2 participants for an in-house or live online session. With only 1 participant, we deliver it as a one-to-one online session instead.

Yes. Many clients pair this course with our one-day team building and high-performing teams programme on the same engagement, so the budget and the day cover both.

Yes. Participants can follow up by email with questions that come up while applying what they learned, and we will point you to the right template, checklist or framework reference even after the session is over.