Use a known route.
For an unexpected message or call, pause before providing access or information. Contact the organization through a website or number you independently know is genuine.
Practice with a fictional message and call →PRACTICAL CYBER SKILLS
Start with the habits
that protect your day.
A foundation to build on: account protection, independent verification, device care, and recovery. Start small and check what you have in place.
YOUR FIRST THREE CHECKS
Add another layer.
Use distinct passwords and review the account’s multi-factor authentication options. Start with important accounts such as email. Follow the service’s official setup and recovery guidance.
Read the FTC’s account-protection guidancePlan your recovery.
Know the official recovery route and keep backups of important data. Device updates, account recovery, and backup checks deserve regular attention.
Read the FTC’s prevention guidanceTHE EXISTING RESOURCE SHELF
Go a little deeper.
These previously published resources are available in the resource library. Their original review dates remain; they have not received a new technical content audit.
CHECKEMAILPLAN
Small-business cyber risk checklist
Existing checklist and downloadable PDF.
Microsoft 365 and QR phishing
Existing technical recipe; review against your current tenant and official guidance.
Ransomware response planning
Existing planning material; an active incident requires your established response process.
Learning aid, not an assessment or guarantee. Sources checked October 29, 2026. Interactive practice times are estimates pending learner testing.