Audience Tracks
All staff share the core 12-month curriculum. Each track adds role-specific depth on top of that foundation — targeted at the threats each audience actually faces.
The broadest track. Every employee regardless of department or seniority. Focus is on daily hygiene: email habits, device care, reporting culture.
| Module | Priority | Delivery |
|---|---|---|
| Phishing identification (SLAM method, report button habit) | Critical | Month 2 |
| Password & MFA hygiene (manager adoption, push-bomb awareness) | Critical | Month 3 |
| Social engineering basics (vishing, smishing, pretexting) | High | Month 4 |
| Remote & cloud hygiene (VPN, public Wi-Fi, shadow IT) | High | Month 6 |
| Incident reporting (when and how to escalate) | Standard | Month 11 |