Learners age 14 and older, including adults exploring technical work or strengthening school and community projects. No employment or university enrollment is needed.
Course 91 · Digital course 16
Cybersecurity for Everyday Work
Recognize suspicious requests, follow role-appropriate access rules, and rehearse reporting and recovery without changing real systems.
Before you start
Prepare a notebook for the fictional print-center scenarios.
See everything you’ll needWhat you’ll leave with
A practice plan for recognizing suspicious requests, reporting concerns, and checking how work could recover.
Start course Start without an account. Sign in to save lesson progress across devices.
Your project
Start with the practice files. Build your project one lesson at a time.
Practice files are free without an account. Sign in to save your project record in My Proof: a description, checklist, and optional work link. Keep the original files in your own app or notebook; saving a project record does not upload them.
- Get your materialsDownload the practice worksheetUse the downloadable worksheet or toolkit alongside the lesson instructions.
- Make your projectView the project checklist Work in your own notebook, document, or software. Use the supplied practice examples when you prefer.
- Keep a private recordSave a project record Sign in to save a description and checklist, then return to update them.
Course handbook
Know the route before you begin.
Here’s what you’ll need and what you’ll make. You can return to this guide during any lesson.
- Prepare a notebook for the fictional print-center scenarios.
- Use role labels and sample job codes only; no real messages, credentials or customer files.
- Treat all reporting, restore and incident actions as paper exercises unless separately authorized in a real organization.
Finish with proof you can use.
Run the fictional print-center tabletop using your five prepared security records and document two improvements.
Save a project record in My ProofSee project checklist and review criteria
Keep your working files in your own notebook or software. Save a private description, checklist, and work link in My Proof.
What to include
- Map work assets, owners and permitted actions.
- Prepare a minimal suspicious-request report using independent verification.
- Resolve access and device scenarios through approved roles.
- Compare a sample restore drill with recovery and data-loss targets.
- Complete an incident chronology and tabletop improvement plan.
Review and revise
Use these criteria to check your work and choose what to improve.
- Authorization: actions stay within the stated workplace role.
- Reporting: facts and interaction history reach the correct route.
- Recovery: time and content evidence are distinguished from assumptions.
- Coordination: fallback contacts and restart decisions are clear.
Three ideas to help you along the way
Three useful ideas
The rules behind the steps.
Know who can act
Access for everyday work does not imply investigative authority.
Verify independently
Use an established route to check sensitive or unusual requests.
Practice recovery evidence
Check restored content and readiness, not only backup status.
What do these words mean?
Key words
Key terms worth knowing.
- Least privilege
- Giving only the access needed for an assigned task.
- Phishing
- A deceptive message intended to induce harmful disclosure or action.
- MFA
- Multi-factor authentication using more than one kind of sign-in evidence.
- Incident response
- Coordinated actions to assess and handle a security event.
- Recovery target
- A defined requirement for restoration time or acceptable missing work.
- Tabletop exercise
- A discussion or written rehearsal without causing the real event.
Your route6 lessons.
6 lessons.
One useful project.
Work in order the first time. Each lesson makes something the next lesson can use.
- 1Up next
Know your role before touching a system
List important work tools and data, called assets. Name who is responsible for each and what actions each role may take.
- 222 min
Recognize a suspicious request and report it
Verify a workplace request through an independent channel and preserve a concise report.
- 324 min
Use access and device controls within your role
Choose appropriate access, approved software and escalation actions.
- 426 min
Check whether recovery is possible
Plan a limited test of restoring a backup, then compare its results with the time and data-recovery targets.
- 524 min
Respond to an incident without improvising
Use a role-based incident card to report, preserve observations and support recovery.
- 631 min
Rehearse a workplace security incident
Combine role, reporting, access and recovery decisions in a short rehearsal.
Use the tools
See all tools Tools to help you practice.
Source transparency
Sources and further study.
Explore the references behind the lessons and take your learning further. Source notes explain access and reuse.
Harvard CS50 — Introduction to Cybersecurity
Source & access notes · checked 2026-09-10
Read the public course overview emphasizing account, data, system and software risks at home and work. Optional deeper study only; original workplace scenarios here.
Access: Free OpenCourseWare reading/videos; external submissions require an edX account. Verified certificates or credit-bearing courses require separate enrollment and may cost money. Life Starter provides no Harvard affiliation, credit or certification.
Reuse: Linked for reference. Examples, activities and assessments here are original; free access alone does not grant permission to reuse source text or branding.
NIST — Phishing
Source & access notes · checked 2026-09-10
Read official examples of urgent action requests and verification through known contact information. CISA pages returned 403 and were not used as verified sources.
Access: Free public reading; no account or certificate is required for this Life Starter course.
Reuse: Linked for reference. Examples, activities and assessments here are original; free access alone does not grant permission to reuse source text or branding.
NIST SP 1300 — Cybersecurity Framework 2.0 Small Business Quick-Start Guide
Source & access notes · checked 2026-09-10
Opened full nine-page guide; read asset owners, need-based access, backups and testing, detection and response authority. General voluntary guidance, not compliance certification.
Access: Free public reading; no account or certificate is required for this Life Starter course.
Reuse: Linked for reference. Examples, activities and assessments here are original; free access alone does not grant permission to reuse source text or branding.
NIST SP 800-61 Rev. 3 — Incident Response Recommendations
Source & access notes · checked 2026-09-10
Opened full April 2025 publication and official final-publication page, which confirms it supersedes Rev. 2. Used for response/recovery roles and coordination; no forensic procedures are taught.
Access: Free public reading; no account or certificate is required for this Life Starter course.
Reuse: Linked for reference. Examples, activities and assessments here are original; free access alone does not grant permission to reuse source text or branding.
Ready when you are
Start lesson one Start with the first useful move.
You’ll always know what to do, what to make, and where to go next.
Open collaboration ideaHelp keep this complete course free.
Potential collaboration: Workplace learning teams, community organizations, libraries and introductory cybersecurity awareness providers.
Partner with LifeStarter