Phishing: the reflexes
Recognize a booby-trapped email, check a sender, don't click, report.
Topic hub · Cybersecurity
The cybersecurity hub: awareness of cyber threats, phishing, passwords, data protection and privacy compliance. Short modules designed for every employee, including in industrial environments.

Why raise cyber-risk awareness
The vast majority of cyberattacks begin with human error: a click on a phishing link, a reused password, an attachment opened without a second thought. No technical protection makes up for an employee who hasn't been made aware.
Effective cyber awareness turns every employee into a first line of defense: recognizing a phishing attempt, managing their passwords, reporting an incident, protecting the data they handle. It's a reflex to maintain, not a one-off session.
This hub also covers employee data-protection training: understanding what personal data is, the principles of data-protection regulation, the right daily reflexes and how to respond to a data breach.
39%
of skills will be transformed or obsolete by 2030: cyber culture, too, has to renew itself continuously.
Regulatory reference
The GDPR gives people eight rights over their data. An employee does not need to know them by heart — they need to recognize that an email they just received is one, and who to pass it to. That is what awareness training delivers.
| Right | Article | What it allows |
|---|---|---|
| Information | 13 and 14 | Knowing what data is collected, by whom and why. |
| Access | 15 | Obtaining a copy of the data held about oneself. |
| Rectification | 16 | Having inaccurate or incomplete data corrected. |
| Erasure | 17 | Obtaining deletion of one's data, under conditions. |
| Restriction of processing | 18 | Freezing the use of data while it is verified. |
| Portability | 20 | Retrieving one's data in a reusable format. |
| Objection | 21 | Objecting to processing, in particular to direct marketing. |
| Automated decision | 22 | Not being subject to a decision based solely on automated processing. |
Source: Regulation (EU) 2016/679, chapter III. The obligation to raise staff awareness is in article 39.
Hub training
Short modules, for every employee, from the office to the shop floor.
Recognize a booby-trapped email, check a sender, don't click, report.
Strong passwords, password manager, multi-factor authentication (MFA), good habits.
Personal data, purpose, retention period, individual rights: the essentials.
FAQ
Data protection and cybersecurity: the essentials before you deploy.
Other hubs
The full list of cyber awareness and data-protection modules, with durations and levels.