Ransomware Awareness & Prevention Training
A one-day fundamentals programme on ransomware for employees and team leaders. Using a fictional office outage, participants learn how an ordinary message, account or file-sharing decision can affect business continuity, and how to follow the organisation's reporting and response instructions.
Who should attend: Employees, supervisors, operations, HR, administration and business support teams. No prior cybersecurity qualification is required.
HRD Corp claim support available
Programme Focus
This standalone staff programme focuses on ransomware behaviour and disruption. The existing combined Ransomware & BEC course remains available, and technical investigation is covered in the incident response and forensics programme.
Programme Agenda
9:00 AM to 10:00 AM
What Ransomware Does to a Business
Explain encryption, data theft and extortion in plain language. Map which daily activities depend on shared files and systems, and consider disruption even when employees do not see a ransom message.
10:00 AM to 10:15 AM
Break
10:15 AM to 11:30 AM
Common Exposure Points
Review suspicious attachments, unexpected downloads, reused credentials and unapproved remote access requests. Identify the staff decisions that need a pause or a report, without running malware or testing company systems.
11:30 AM to 12:30 PM
Prevention in Everyday Work
Practise checking requests, using approved applications and respecting device-update instructions. Explain why restricted access and properly managed backups are organisational responsibilities supported by staff behaviour.
12:30 PM to 1:30 PM
Lunch
1:30 PM to 2:45 PM
Recognising and Reporting a Suspected Incident
Use unusual file changes and access problems as prompts to report, not as a diagnosis. Follow the approved response procedure; preserve relevant details and avoid deleting evidence or attempting unauthorised fixes.
2:45 PM to 3:00 PM
Break
3:00 PM to 4:00 PM
Working Through an Outage
Discuss approved alternate communications and manual workarounds. Identify who authorises containment, customer messages and restoration. Separate employees' reporting duties from leadership decisions about extortion demands.
4:00 PM to 5:00 PM
Practical Exercise: Shared Files Become Unavailable
A fictional team receives an unusual file alert before a deadline. Decide what to stop, what to report and how to continue essential work safely. Build a department-level prevention and escalation checklist.
Key Outcomes
- Explain ransomware and its business impact
- Reduce risky file and account behaviours
- Escalate suspicious activity promptly
- Follow approved outage and recovery instructions
Training Mode Physical / Online / Hybrid
HRD Corp Subject to programme eligibility and HRD Corp approval
Level Fundamentals / Beginner. No prior cybersecurity experience required.
Duration 1 Day | 9:00 AM to 5:00 PM (6.5 learning hours, excluding breaks)
Venue In-house at the client's premises, or delivered via the client's preferred platform (Microsoft Teams, Zoom, or equivalent)
Assessment Group case exercise and a 10-question knowledge check
Certificate Orbix Certificate of Completion upon full attendance; not a professional certification
Malaysia Relevance
Examples cover Malaysian offices, shared folders, payroll deadlines and customer-facing operations. The course links individual actions to the organisation's incident and recovery arrangements.
Practical Takeaways
A ransomware staff-response card and department prevention checklist.
Download a sample practice worksheet (TXT). This fictional exercise is a preview of the learning approach. About Orbix; contact us to confirm the facilitator and relevant experience for your delivery.
Course Completion and Next Steps
Participants receive an Orbix Certificate of Completion upon full attendance. This introductory programme does not confer a professional qualification, certify an organisation, or replace organisation-specific technical, legal or regulatory assessment.
Frequently Asked Questions
Related Fundamentals Training
Ransomware & BEC Awareness. Incident Response & Digital Forensics. View all fundamentals programmes
Reference material: CISA: StopRansomware Guide. NIST: SP 800-61 Revision 3, incident response.