Cybersecurity · Advanced level

Advanced level · Module 5 of 6 · 20 guided hours

Data Protection, Ethics and Security Culture

Protect personal data, act ethically as a security professional and build a lasting security culture.

Learning objectives

  • Apply data protection principles to organisational data
  • Act according to professional ethics
  • Design an awareness programme
  • Run phishing simulations ethically

Topics

  • data protection principles
  • data mapping
  • professional ethics
  • awareness programmes
  • ethical phishing simulations
  • culture measures

Lessons

  1. Lesson 1 Data Protection Principles

    Handle personal data lawfully, fairly and securely.

    purpose limitationdata minimisationsecurity and retentiondata mapping

  2. Lesson 2 Professional Ethics

    Act with integrity when you have powerful access and sensitive knowledge.

    integrityconfidentialityprivacy of usersconflicts of interest

  3. Lesson 3 Designing an Awareness Programme

    Plan a year of activities that build secure habits.

    audiencesrole-based trainingcampaignsmeasuring change

  4. Lesson 4 Ethical Phishing Simulations

    Use simulations to teach, not to trap or shame.

    approval and transparencyrealistic but fair luresteachable momentsno blame

Practical activity

Map personal data for the case NGO, apply data protection principles and design a 12-month awareness programme.

Expected outcomes

  • Responsible handling of personal data
  • A sustainable awareness programme

Assessment

Data map, programme design and ethics reflections assessed.

Taught live by an instructor — online or in person. Free course lessons are for self-study and do not lead to a certificate — see registration options.