Overview

Cyber security looks different once you manage a team and approve spend, access and exceptions. This practical, jargon-free course is built specifically for managers and team leaders: how attackers target approval authority, what changes when your team reports a problem, and how to build and lead a genuinely security-first team. Four short units.

Target Audience

Managers and team leaders at any level, accountable for their team’s security behaviour and for approving spend, access and exceptions. No technical background required.

Learning Objectives

Upon completion, learners will gain a full and clear understanding of:

• Why security is now a management responsibility, not only an IT one
• How attackers specifically target approval authority and manager impersonation
• How to make sound decisions on spend, access and vendor or contractor requests, even under pressure
• What to do differently when a team member reports a problem
• How to set clear, everyday security expectations for a team
• How to build and lead a genuinely security-first team, including the harder conversations

Features and Benefits

• Written for complete beginners: practical, jargon-free and easy to follow.
• Current and fact-checked: researched against up-to-date 2026 sources, including the latest case studies and regulation.
• Four short, focused units with gated progression; each unit unlocks once the previous one is passed.
• Light, formative interactions running through every unit (click-to-reveal, quick knowledge checks and estimate-and-reveal sliders), never scored.
• An end-of-unit quiz that finishes with a marking screen showing which answers were right or wrong, with a short explanation for each.
• Easy retakes: a failed quiz drops the learner straight back into freshly shuffled questions, with no need to click through the unit again.
• Optional audio narration on every screen (the learner chooses to listen), plus narrated motion-graphic video introductions, with captions throughout for accessibility.
• Responsive layout, suitable for PC, tablet and mobile.
• SCORM 1.2 conformant (single SCO); reports completion and an averaged score to any compliant LMS.

Course Contents

Unit 1: Becoming the Accountable Layer

• Why a manager’s security responsibility widens from personal habits to team behaviour
• Where day-to-day responsibility sits, and how the UK’s governance picture reaches line managers
• Why attackers specifically target people with approval authority
• The judgement calls, and the everyday habits, that come with the role

Unit 2: Threats That Target Your Authority

• Approval-workflow fraud, and the real scale of business email compromise and UK payment fraud
• What happens when a manager’s own authority is impersonated to pressure their team
• Two 2024 case studies of executive impersonation, one that succeeded and one that was stopped
• Vendor and contractor access decisions, and a practical approval checklist

Unit 3: Your Team’s First Response

• What changes for a manager, versus an individual contributor, when a problem is reported
• A practical first-response script, and what not to do
• Protecting the reporter, escalating cleanly, and the extra step when a payment is involved
• Setting reporting expectations before an incident, not during one

Unit 4: Leading a Security-First Team

• No-blame culture in practice, and how to raise a repeated lapse constructively
• Leading by example, and making the case for security budget and resourcing
• Working well with IT and security teams, and managing contractor and vendor access on an ongoing basis
• A manager’s action plan for building a security-first team