Cybersecurity Awareness for Employees Course 2026
This course is for employees in Canada who use email, phones or computers at work. It covers common threats, phishing and payment scams, passwords and multi-factor authentication, protecting information and devices, and what to do when something goes wrong. Each topic has a short lesson and an untimed quiz, followed by a timed 30-question final assessment; score 80% or more to earn a Certificate of Completion.
إجابة سريعة
تتضمن هذه الدورة المجانية نحو 150 دقيقة من الدروس، و6 اختبارات موضوعية بلا وقت محدد (98 سؤالًا إجمالًا)، وتقييمًا نهائيًا محدد الوقت من 30 سؤالًا يُختار عشوائيًا. احصل على 80% أو أكثر في التقييم النهائي لتنزيل شهادة إتمام (خاصة، غير معتمدة). تمت مراجعته مقارنةً بالمصادر الرسمية في 13 أكتوبر 2026.
ما ستتعلمه
- Explain why every employee can be a target and name the most common cyber threats in Canada
- Spot the warning signs of phishing in emails, texts, phone calls and QR codes
- Verify payment, banking and gift card requests before acting
- Create strong passphrases and use password managers and multi-factor authentication safely
- Protect personal and workplace information on paper, devices, Wi-Fi and USB
- Report incidents quickly and take the right first steps after clicking or sharing something
احصل على 80% أو أكثر لتنزيل شهادتك.
خطتك الدراسية
اقرأ كل درس، ثم أجرِ اختبار موضوعه (بلا وقت محدد ومع الشرح)، ثم التقييم النهائي المحدد بوقت. تُختار مجموعة جديدة من الأسئلة في كل مرة. يُحفظ تقدمك في هذا المتصفح.
- اقرأ الدروس6 دروس، نحو 150 دقيقة
- اختبار الموضوع 1: Why cybersecurity matters at workعدد الأسئلة: 15
- اختبار الموضوع 2: Spotting phishing: email, text, phone and QR codesعدد الأسئلة: 19
- اختبار الموضوع 3: Payment fraud, fake invoices and CEO scamsعدد الأسئلة: 16
- اختبار الموضوع 4: Passwords, passphrases and multi-factor authenticationعدد الأسئلة: 16
- اختبار الموضوع 5: Protecting workplace information and devicesعدد الأسئلة: 16
- اختبار الموضوع 6: Reporting incidents and what to do if you clickedعدد الأسئلة: 16
- الامتحان النهائي30 سؤالًا، 35 دقيقة · احصل على 80% أو أكثر
اختبار الموضوع 1: Why cybersecurity matters at work
-
السؤال 1 من 15
أظهر الإجابة
الإجابة: D. Tricking people into giving away information or access
Social engineering uses deception and impersonation to get people to share information, grant access or take harmful actions.
-
السؤال 2 من 15
أظهر الإجابة
الإجابة: A. A Trojan horse
Malware is malicious software. Viruses, worms, Trojan horses, spyware and adware are all types of malware.
-
السؤال 3 من 15
أظهر الإجابة
الإجابة: A. Locks systems or data until a payment is made
Ransomware is malware that denies a victim access to a system or data until they pay money.
-
السؤال 4 من 15
أظهر الإجابة
الإجابة: D. Fraud and scams
The assessment says fraud and scams are almost certainly the most common form of cybercrime affecting Canadians, and phishing is among the most reported types.
-
السؤال 5 من 15
أظهر الإجابة
الإجابة: A. Ransomware
Fraud is more common, but the assessment says ransomware will almost certainly continue to be the most impactful cyber threat facing Canadian organizations.
-
السؤال 6 من 15
أظهر الإجابة
الإجابة: D. So you act before you check if it is real
Pressure and deadlines are a classic warning sign. Scammers want you to act quickly so you do not have time to verify the request.
-
السؤال 7 من 15
أظهر الإجابة
الإجابة: B. Using a made-up story or role to gain trust
Pretexting is a social engineering trick that uses a made-up scenario to build trust and get information or access.
-
السؤال 8 من 15
أظهر الإجابة
الإجابة: D. Luring someone with a prize or reward
Baiting uses something tempting, like a prize or reward, to get the target to click a link or take another harmful action.
-
السؤال 9 من 15
أظهر الإجابة
الإجابة: D. Stealing sign-in details, spreading malware and stealing or damaging data
Threat actors use malicious email to steal credentials, spread malware such as ransomware or spyware, and steal or corrupt information.
-
السؤال 10 من 15
أظهر الإجابة
الإجابة: A. AI-made fake audio, video or images of a real person
Deepfakes are AI-made audio, video or images. Scammers use them, along with voice cloning, to impersonate people the victim trusts.
-
السؤال 11 من 15
أظهر الإجابة
الإجابة: C. Helpdesk staff and staff who deal with the public
The Cyber Centre lists senior executives and their assistants, helpdesk staff, system administrators, people with access to sensitive information and staff who deal with the public.
-
السؤال 12 من 15
أظهر الإجابة
الإجابة: D. Scammers target all kinds of workplaces, so stay alert
Anyone with access to email, accounts or information can be a target. Fraud and scams are the most common form of cybercrime affecting Canadians, and the Cyber Centre says no one is immune.
-
السؤال 13 من 15
أظهر الإجابة
الإجابة: A. Malware can spread to other systems on the network
Once one device is infected, malware such as ransomware can spread to other connected systems on the network.
-
السؤال 14 من 15
أظهر الإجابة
الإجابة: D. Criminals selling attack tools and stolen data to others
Specialized criminals sell stolen data and ready-made tools, which makes it easier for less skilled criminals to attack.
-
السؤال 15 من 15
أظهر الإجابة
الإجابة: B. Steal data and threaten to leak it
The Cyber Centre says attackers now often steal data and threaten to publish it as their main form of extortion.
لوحة المفاتيح: 1–4 للإجابة، وEnter للسؤال التالي.
ما يجب معرفته قبل الاختبار
- Fraud and scams are almost certainly the most common form of cybercrime affecting Canadians, and phishing is one of the most reported types of fraud.
- Ransomware will almost certainly remain the most impactful cyber threat facing Canadian organizations.
- The Cyber Centre recommends passphrases of at least 4 words and 15 characters, or passwords of at least 12 characters.
- You can forward spam and scam texts to 7726 (SPAM on most keypads) so your cellular provider can investigate and block them.
- Fraud can be reported to the Canadian Anti-Fraud Centre online or toll-free at 1-888-495-8501, even if you were not a victim.
- Under PIPEDA, a breach that creates a real risk of significant harm must be reported to the Privacy Commissioner and the people affected must be notified; records of all breaches must be kept for two years.
الأسئلة الشائعة
Is this an official cybersecurity certification?
No. When you pass the final assessment you get a PassEveryTest Certificate of Completion, which shows you finished this general awareness course. It is not an accredited cybersecurity certification and does not replace the security training your employer requires.
How does the final assessment work?
It has 30 questions drawn at random from the course question bank, with a 35-minute time limit. You need 80% to pass, and each attempt gives you a new mix of questions.
What should I do if I clicked a suspicious link at work?
Stop using the device and tell your IT or security team right away. If you typed in your password, change it and reset multi-factor authentication as they direct.
Where do I report a scam text message?
Forward it to 7726 (SPAM) so your phone provider can investigate. You can also report scams to the Canadian Anti-Fraud Centre online or at 1-888-495-8501.
Do I need technical knowledge to take this course?
No. It is written for everyday employees who use email, phones and computers at work.
هل الشهادة معتمدة أو معترف بها رسميًا؟
لا. إنها شهادة إتمام خاصة للمعرفة فقط. وهي غير معترف بها أو معتمدة أو موافق عليها من أي حكومة أو جهة ترخيص أو هيئة تنظيمية أو مؤسسة تعليمية، ولا تحل محل أي رخصة أو شهادة أو تدريب يفرضه القانون.
المصادر
- Canadian Centre for Cyber Security: National Cyber Threat Assessment 2025-2026
- Canadian Centre for Cyber Security: Social engineering (ITSAP.00.166)
- Canadian Centre for Cyber Security: Don't take the bait: Recognize and avoid phishing attacks (ITSAP.00.101)
- Canadian Centre for Cyber Security: Spotting malicious email messages (ITSAP.00.100)
- Canadian Centre for Cyber Security: What is voice phishing (vishing)? (ITSAP.00.102)
- Canadian Centre for Cyber Security: Security considerations for QR codes (ITSAP.00.141)
- Canadian Centre for Cyber Security: Best practices for passphrases and passwords (ITSAP.30.032)
- Canadian Centre for Cyber Security: Secure your accounts and devices with multi-factor authentication (ITSAP.30.030)
- Canadian Centre for Cyber Security: How updates secure your device (ITSAP.10.096)
- Canadian Centre for Cyber Security: Tips for backing up your information (ITSAP.40.002)
- Canadian Centre for Cyber Security: Ransomware: How to prevent and recover (ITSAP.00.099)
- Canadian Centre for Cyber Security: Security tips for peripheral devices (ITSAP.70.015)
- Canadian Centre for Cyber Security: Report a cyber incident
- Get Cyber Safe: Passphrases, passwords and PINs
- Get Cyber Safe: Password managers
- Get Cyber Safe: Multi-factor authentication
- Get Cyber Safe: Public Wi-Fi
- Get Cyber Safe: Laptops and computers
- Get Cyber Safe: Smishing: An introduction
- Get Cyber Safe: Reporting spam text messages to 7726
- Get Cyber Safe: Don't get hooked: understanding phishing
- Canadian Anti-Fraud Centre: Phishing
- Canadian Anti-Fraud Centre: Spear phishing (business executive, payroll and supplier spoofs)
- Canadian Anti-Fraud Centre: False billing
- Canadian Anti-Fraud Centre: Reporting fraud
- Royal Canadian Mounted Police: Business email compromise
- Canadian Anti-Fraud Centre: What to do if you're a victim of fraud
- Office of the Privacy Commissioner of Canada: PIPEDA in brief
- Office of the Privacy Commissioner of Canada: PIPEDA fair information principle 7 - Safeguards
- Office of the Privacy Commissioner of Canada: What you need to know about mandatory reporting of breaches of security safeguards
- Office of the Privacy Commissioner of Canada: Protecting workplace mobile devices
- Office of the Privacy Commissioner of Canada: Ten tips for addressing employee snooping
- Office of the Privacy Commissioner of Canada: Personal information retention and disposal