Security Awareness Practices for Security+

This Security+ topic covers phishing practices: campaigns, recognizing a phishing attempt, and responding to reported suspicious messages; Anomalous behavior recognition: risky, unexpected, and unintentional behavior; User guidance and training: policy/handbooks, situational awareness, insider threat, password management, removable media and cables, social engineering, operational security, and hybrid/remote work environments; Program operation: reporting and monitoring, initial and recurring activities, development, and execution.

Start first lesson

4 lessons in this topic

Phishing Awareness Practices

Implement phishing awareness practices around campaigns, recognizing phishing attempts, and responding to reported suspicious messages.

Anomalous Behavior Recognition

Recognize risky, unexpected, and unintentional anomalous behavior as awareness and reporting targets.

User Guidance Topics

Teach user guidance around handbooks, situational awareness, insider threat, password management, removable media, social engineering, operational security, and hybrid or remote work.

Awareness Program Execution

Differentiate initial and recurring reporting, monitoring, development, and execution activities for security awareness programs.

Common mistakes to avoid

Learners often think users should forward suspicious messages to coworkers as a warning. The correction: use the approved reporting channel so security can preserve evidence and coordinate response.

Learners often equate anomalous behavior with malicious insider activity. The correction: anomalous means unusual or risky; it may be accidental, benign, compromised, or malicious.

Learners often confuse awareness guidance with technical enforcement. The correction: this section teaches what users are trained to do and recognize; technical control configuration belongs to operations.

Learners often confuse development and execution. The correction: development designs the program; execution delivers and operates it.