FICTIONAL DOCUMENT FOR PRACTICE - no reference to real people, companies or records One-day course for the staff of a company (fictional): "Cyber security in the office" Time available: from 9:00 to 17:00. One-hour lunch break. Two 15-minute coffee breaks. Modules and length: 1. Passwords and two-factor authentication - 60 minutes 2. Spotting phishing - 90 minutes 3. Devices and networks away from the office - 45 minutes 4. Personal data and company documents - 60 minutes 5. Group exercise on real cases - 75 minutes 6. Final test and feedback form - 30 minutes Constraints: the final test is the last activity; the group exercise comes after the phishing module.