Attacks now arrive as a polished email, a text, a Teams-style call, a QR code or a deepfaked boss on video. This self-paced course gives every employee the habits that hold up: check the message, verify the request on a second channel, lock down sign-ins and report in minutes. Learners rehearse in the Threat Inspector and three branching Scenario Sims, with examples switched to their own role. About 5 hours, with a certificate and a dated record per learner.
Bodhih Cyber Safe at Work is a self-paced cybersecurity awareness course for every employee, taking about 5 hours. In six short modules, learners practise spotting phishing on email, text, chat, calls and QR codes; verifying deepfake and payment-change requests; protecting accounts with passphrases, password managers, passkeys and MFA; handling data safely, including in AI tools; and reporting fast. A Role Lens adapts examples to seven functions. A before-and-after check, a certificate and a dated record per learner support annual training evidence.
Facts on this page last checked by Siddharthan VGJ, Director, Bodhih Training.
A peer-reviewed study of more than 19,500 health-system staff (Ho and colleagues, IEEE S&P 2025) found annual training had no significant link with who clicked. What helps is practice with feedback, rehearsed verification, strong sign-in habits and fast reporting, so that is what this course trains, and it measures each learner before and after.
Microsoft reports that Teams-style vishing attempts and calendar-invite lures rose sharply in 2026, and QR codes now hide in PDFs and posters. Spelling mistakes are no longer a reliable sign. The request and the route are, on whichever channel the message arrives.
A deepfaked CFO on a video call, a supplier asking to change bank details, a help-desk caller asking for a code. The defence is a process people have rehearsed, and a reporting culture where someone who clicked calls the security desk in minutes, not days.
No technical knowledge needed. Short modules work on a phone, and the Role Lens puts examples from your own job in every exercise, from fake CVs in HR to fake carrier notices in operations.
You need a course people finish and a record you can show. Each learner gets a dated completion record with modules, before-and-after scores and role lens, renewed yearly.
Module 3 is built for you: deepfake calls, fake bosses, invoice and bank-change fraud, rehearsed in The CFO Call simulation until the call-back on a known number is automatic.
A fixed, published seat price from 25 seats with no multi-year term, global content with India-first reporting routes (CERT-In, 1930, cybercrime.gov.in) alongside UK and US routes.
This course is not for security professionals seeking a technical qualification, and it does not send simulated phishing emails into staff inboxes: companies that want inbox simulations can run them with their email security tool alongside it.
Four dated figures, each linked to its source.
Of the breaches analysed involved the human element, down from 68% the year before.
Verizon 2025 Data Breach Investigations Report (via ClearanceJobs), April 2025Reported cybercrime losses in the US in 2025, up 26%, including about US$3.05 billion to business email compromise.
FBI IC3 2025 Internet Crime Report (via dmarcian), April 2026Transferred by a finance worker at Arup after a video call in which the “CFO” and colleagues were deepfakes.
CNN, 16 May 2024Microsoft reports AI-automated phishing emails drew a 54% click-through rate, against 12% for other phishing.
Microsoft Digital Defense Report 2025 (vendor research, via The Register), October 2025Imagine a finance colleague hearing what sounds like the CFO ask for an urgent, confidential transfer, and calmly saying “I’ll call you back on your directory number.” That is the kind of habit this course builds, through practice on realistic messages and calls rather than a slideshow, and it is measured from the first check to the last.
Spoofed senders, lookalike links, pressure, unusual requests, risky files and data requests, on email, text, chat, calls, QR codes and calendar invites. And clear the messages that check out.
Use a second, known channel (the supplier file, the company directory) for any payment, bank change or access request, even when the voice or face seems real.
Long, unique passphrases in a password manager, passkeys or number-matched MFA switched on, and the strongest option chosen on the MFA ladder.
Deny prompts you did not start, never share a code, and spot the help-desk caller or SIM-swap cue before it costs you the account.
Classify information with the data traffic light, use only approved tools (including approved AI tools), and work safely at home, on public Wi-Fi and while travelling.
Stop, Tell, Keep, Change: report suspicious messages and your own mistakes at once, keep the evidence and take the first containment steps.
A baseline check, a final check and a dated record for each learner, so the company can show what changed.
The pathway runs in order: a 10-minute baseline check, then six modules (How attacks really work in 2026; Phishing on every channel; Deepfakes, fake bosses and payment fraud; Passwords, passkeys and MFA; Handling data safely, anywhere; Spot it, report it: the first 15 minutes), each with a hands-on lab, an 8-question check and booster questions two and seven days later, then the final check.
Measured before you start and again on the same instrument at the end, so the change is recorded rather than claimed.
The baseline check, Form A: 12 scenario questions on all six topics, about 10 minutes. It is not pass/fail; it sets your baseline, and you take a parallel check at the end.
Why attacks work on smart people, the 2026 threat picture and the five-step attack chain. Lab: the Attack Chain Breaker, with a real attack for your role.
Phishing by email, text, chat, calls, QR codes and calendar invites, the six tells and reading the real domain. Lab: the Threat Inspector, with an inbox for your role.
Deepfake calls and voice clones, fake bosses and supplier bank-change fraud, and the second-channel rule. Scenario Sim: The CFO Call.
Passphrases, password managers, passkeys and MFA, and the attacks around them: MFA fatigue, help-desk impersonation and SIM swaps. Scenario Sim: Push at Midnight.
Data labels, approved tools (including AI tools), and safe work at home, in public places and while travelling. Lab: the Data Handling Desk.
Why fast, blame-free reporting is the best defence, and the first 15 minutes after a mistake: Stop, Tell, Keep, Change. Scenario Sim: I Think I Clicked It.
The final check, loaded from Form B: 12 parallel scenario questions, about 12 minutes. Score 70% or more (3 attempts) for your completion certificate and dated completion record.
Finishing this pathway issues a credential backed by the evidence you produced along the way. It is verifiable by link and is also issued as an Open Badge 2.0, so an employer can check it without taking your word for it.
Fake CVs with risky attachments, payroll bank-change requests and fake candidates on video.
Supplier bank-change fraud, fake CFO calls and fake tax notices, verified by a call-back on a number already on file.
Fake RFPs, e-signature lures and fake buyers asking for price lists.
Fake carrier notices and supplier portals, QR codes on delivery paperwork and remote-access requests.
Social account takeover lures, fake brand collaborations and agency invoices, and oversharing online.
Takeover attempts through support, refunds to new cards and “photo of damage” attachments.
What comes with the course, and what makes the practice different.
A morning of messages for your role across email, text, chat, a QR poster, a calendar invite and a collaboration-tool message. Flag each tell, name it, and clear the lines that check out.
The CFO Call (a timed, branching deepfake payment request), Push at Midnight (MFA fatigue, help-desk vishing and a SIM-swap cue) and I Think I Clicked It (the first 15 minutes on an in-sim clock). Each ends in a debrief showing the stronger move.
Scam-Proof (Pause-Check-Verify card, red-flag checklist, first hour after fraud, fraud reporting directory), Information Security for Small Business (incident first-hour card, policy set, awareness training outline) and The AI-Fluent Professional (what never to paste, team usage guidelines).
Seats from 25, a dated completion record per learner (date, modules, before-and-after scores, role lens) and company reporting, renewed yearly with each content update logged.
Ask about company seats| What is compared | A typical cybersecurity awareness course | Cyber Safe at Work at Bodhih |
|---|---|---|
| Practice | Watch a video, then answer a short quiz. | The Threat Inspector, three branching Scenario Sims and role-based sorting labs, with feedback on every decision. |
| Channels covered | Often email only. | Email, SMS, chat, calls, QR codes, calendar invites and collaboration-tool messages. |
| Your role | One set of generic examples. | Role Lens: examples and labs switch to seven functions. |
| Measurement | A completion tick or a certificate. | A baseline and a final check on parallel forms, plus a dated completion record per learner. |
| Reporting routes | Rarely names local routes. | India-first (CERT-In, 1930, cybercrime.gov.in) alongside UK (report@phishing.gov.uk, 7726, Report Fraud) and US (ic3.gov) routes. |
| Simulated phishing in your inbox | Platforms usually include it; free courses do not. | Not included. Pair the course with your email security tool if you want inbox simulations. |
No ratings yet. Only people who have bought this pathway can rate it - every buyer gets a one-click rating link a couple of days after their purchase.
Straight answers on time, price, tools and the credential. If yours is not here, ask us and you will have a reply the same working day.
It depends on your sector, your contracts and the standards you follow. ISO/IEC 27001:2022 (Annex A 6.3), PCI DSS v4.0.1 (Requirement 12.6) and NIST CSF 2.0 (PR.AT) all expect awareness training, and many clients and insurers ask for it. Bodhih Cyber Safe at Work supports that evidence with a dated record per learner; it does not certify compliance with any standard.
It is for every employee in any sector, including new joiners, contractors and non-desk staff. No technical knowledge is needed. Learners pick their role (General, HR and People, Sales, Finance, Operations, Marketing or Customer Service) and the examples and labs switch to their work. It is global, with India-first reporting routes alongside UK and US ones.
About 5 hours in total: six modules of 35 to 40 minutes, a 10-minute baseline check and a short final check. It is self-paced and works on a phone or laptop, and learners can stop and resume at any point.
Yes. Learners who pass the final check (70%, up to 3 attempts) receive the Bodhih Cyber Safe at Work completion certificate, issued as an Open Badge 2.0 with a verify page and a PDF, plus a dated completion record. It is a training credential from Bodhih Training Solutions, not a university or government qualification.
Company seats cost $29 per seat a year, with a minimum of 25 seats; an individual place is $35. Companies get company reporting and a completion record for each learner (date, modules completed, baseline and final scores, role lens). The modules are SCORM 1.2 packages run in the Bodhih LMS; ask us if you want to run them in your own LMS. Write to solutions@bodhih.com or call +91 99000 11601.
Only a web browser on a phone, tablet or computer. The Threat Inspector and the Scenario Sims run inside the course, so no email account, security tool or password manager purchase is needed to complete it. Module 4 explains how to set up a password manager and passkeys with the tools your company approves.
No. Learners train on realistic messages and calls inside the course. If you want simulated phishing in real inboxes as well, run it with your email security tool alongside this course.
Yes. Module 3 covers deepfake video calls, voice clones, fake bosses and payment-change fraud, with The CFO Call, a timed, branching simulation. AI-written phishing, ClickFix fake “verify you are human” pages, QR and calendar-invite lures, and safe use of approved AI tools appear across the other modules.
Platforms such as KnowBe4 offer large libraries and simulated phishing, usually on a per-user subscription, often quote-based or multi-year. Free courses such as the UK NCSC’s Top Tips for Staff give a short baseline without a record. This course sits between them: about 5 hours of hands-on practice, role-based examples, a before-and-after check and a record per learner at a published seat price, without inbox simulations.
No. It is an awareness course for every employee, not technical security training, and it is not linked to any outside certification body. People aiming at a security career should take a course written for that exam.
Stop, tell your IT or security team at once, keep the message, and change your password from a different device if you typed it in. Follow your own IT team’s instructions. If money was sent, call your bank now; in India also call 1930 or report at cybercrime.gov.in. Module 6 practises exactly this in the I Think I Clicked It simulation.
You can start today: the course is $35 for an individual, or $29 per seat a year for companies from 25 seats. Notice how quickly the six tells and the call-back become second nature once you have rehearsed them. For company seats, write to solutions@bodhih.com or call +91 99000 11601.
Starting records where you stand today. That baseline is what the re-measurement is compared against, and it is never rewritten afterwards.
Lead your team’s AI use safely and lawfully: the 2026 rules, three Scenario Sims and a real AI register entry.
Calm angry customers, solve on the first contact and handle complaints well, practised in six branching sims tailored to your sector.
Six practical EI skills for everyone at work, practised in six branching Scenario Sims, with a 30-day practice plan.
Measure your team first, plan each person’s growth after, or bring a trainer or coach in. Bodhih’s sister companies cover the rest of the journey.