# Phishing and Social Engineering Defense (Self-Paced) Canonical URL: ## Overview 5 C.F.R. § 930.301 requires federal agencies to provide security awareness training on an initial and ongoing basis. This foundational course is built to satisfy that requirement rather than to sit alongside it. This course covers the full range of modern social engineering. Alongside phishing, spear-phishing, whaling, and business email compromise, it addresses smishing, vishing, including AI-generated voice deepfakes, quishing via malicious QR codes, pretexting, tailgating, badge cloning, and USB baiting. It also connects social engineering awareness to insider threat indicators, since both are reported through similar channels. Learners work through six to eight realistic email, SMS, and voicemail transcript artifacts, a mix of legitimate and malicious, and call each one. The instant-feedback answer key spends its detail on the ambiguous cases, which is where real incidents begin. ## What you'll learn - Explain the federal legal and policy basis for security awareness training, and your own responsibility for protecting government systems - Identify the major phishing categories and social engineering techniques across every channel attackers use - Recognize channel-specific red flags and apply a structured verification checklist before clicking, replying, or acting - Apply a report-and-verify procedure, including who to notify and how quickly - Describe how phishing-resistant multifactor authentication backs up individual vigilance - Demonstrate proficiency through a scored knowledge check and a phishing-triage exercise ## Curriculum #### Federal Policy Foundations - Understand the chain from FISMA through OMB policy, NIST standards, and agency implementation to individual awareness, including roles and accountability. #### Anatomy of a Phishing Attack - Examine phishing, spear phishing, whaling, and business email compromise; the attacker playbook from reconnaissance to monetization; and the lures used against federal employees. #### Social Engineering Beyond Email - Review smishing, vishing including AI-generated voice, quishing, pretexting, tailgating, badge cloning, USB baiting, social media reconnaissance, and insider threat overlap. #### Recognize, Resist, Report - Apply the verification checklist, out-of-band verification methods, reporting paths and timelines, and protections for good-faith reporting. #### Self-Paced Workshop: Phishing Triage - Evaluate six to eight realistic artifacts as legitimate or suspicious using an instant-feedback answer key. #### Defense in Depth - Explore phishing-resistant multifactor authentication using PIV/CAC and FIDO2, Zero Trust context, Rules of Behavior, and everyday cybersecurity hygiene. ## Instructors ### Wes Bryan — Instructor Wes Bryan resides in Gainesville, Florida, and has built his career around technology, education, and helping others understand complex subjects. He values continuous learning, clear communication, and practical problem-solving. Outside of work, Wesley enjoys running, hiking, fishing, and spending time outdoors. He also has a strong interest in music and literature, enjoys reading both fiction and nonfiction, as well as playing guitar. ### Chuck Moore — Instructor With more than 25 years of experience in IT and cybersecurity, Chuck has built a career on a strong foundation in security, networking, help desk operations, and technical training. He has helped organizations strengthen their security posture by identifying vulnerabilities, conducting threat assessments, implementing security controls, and ensuring compliance with industry standards. Combining extensive technical expertise with a passion for education, Chuck equips professionals with the knowledge and practical skills needed to recognize risks, risks and respond effectively. ## Pricing **Tuition:** $449