Cyber hygiene training: everyday habits that keep attackers out
Cyber hygiene is the set of everyday habits that keep attackers out: strong passwords, two-factor login, careful clicking, safe sharing and quick reporting. Our training builds those habits in every staff member, then tests them with a practice phishing email. The training suits any team that uses email, phones or cloud apps.
2,000+ hours of PDPA and information security training delivered by our trainers
Who asks for it, and what it shows them
The questions people ask you, and what this answers.
- Employees“How do I spot a phishing email?”Staff learn the warning signs, such as urgent language and suspicious attachments.Cyber Security Agency of Singapore (CSA), read 12 Oct 2026
- Management“Are staff our weakest link?”The Cyber Security Agency says one of the biggest threats in any organisation comes from its own employees.Cyber Security Agency of Singapore (CSA), read 12 Oct 2026
- Tender panels and procurement“Do staff report suspicious emails?”Cyber Essentials requires employees to report suspicious emails or attachments immediately.Cyber Security Agency of Singapore (CSA), read 12 Oct 2026
A case study in the Cyber Security Agency’s SME toolkit describes a phishing incident that led to an estimated loss of S$2.3 million.
Cyber Security Agency of Singapore (CSA), read 12 Oct 2026What you get
- Passwords, passphrases and password managers made simple
- Two-factor login on email and key accounts
- How to spot phishing, fake invoices and bank-detail changes
- A practice phishing email, with results by team
- A simple way to report anything suspicious, fast
- Attendance records and phishing simulation results
- A short report of who needs follow-up
Phishing from taken-over email accounts cost three consumers S$217,900; the organisation was fined S$20,000. PDPC, 2024.
Cyber resilience training: induction, then regular refreshers
How it works
- You
Tell us your tools, team size and any recent scams you have seen.
- Us
We run the session on site or online, then send a practice phishing test.
- Result
Staff spot and report scams sooner, and you have the results on record.
Common questions
What is cyber hygiene?
Basic, regular habits that keep accounts and devices safe: updates, strong passwords, two-factor login, backups and caution with links and attachments. Like washing hands, it works because everyone does it every day.
What is a phishing simulation?
A safe, fake phishing email sent to staff to see who clicks or reports it. Nobody is shamed; the results show where extra coaching helps.
Is security awareness training required?
The Personal Data Protection Act (PDPA) requires reasonable security for personal data, and staff habits are part of that security. The Personal Data Protection Commission (PDPC) has penalised organisations where weak passwords and phishing led to breaches.
How long is the session?
We fit the session to your team, on site or live online, and agree the length with you beforehand.
Latest PDPC case on this topic · 2026-09-21 · Security and facilities services · Voluntary undertaking
Service accounts with VPN access need the same protection as staff logins: stolen credentials gave attackers file-server access to staff, ex-staff and contractor data.
Read the PDPC decision of 21 September 2026, on pdpc.gov.sg (opens in a new tab)Training is delivered by qualified adult educators (ACLP and DACE), issued by the Institute for Adult Learning.
Compliance is black and white. Your business isn’t.
Leave your details and an adviser replies within 2 office hours.
Download a one-page brief for your management or board (PDF, 68 KB)