Employees click links, visit websites and work through browsers every day. This routine behaviour makes internet use one of the most common attack vectors for cybercriminals. A single wrong click can lead to phishing, malware infections or data breaches.
The course Safe Online Working: Recognising URLs & Secure Browsing consists of two complementary modules that together provide a practical and comprehensive approach to safe internet use at work.
Part 1 – Recognising and assessing URLs
The first module explains how URLs are structured and how attackers manipulate them to mislead users. Employees learn what HTTPS does and does not guarantee, why browser lock icons can be misleading, and how subtle changes in domain names can redirect users to malicious websites.
Through clear examples, participants learn to identify suspicious URLs, such as shortened links, domains with hyphens, numeric addresses or deceptive use of symbols like the @ sign. The module also explains what actions to take if a suspicious link is clicked accidentally.
Part 2 – Secure web browsing
The second module focuses on secure browser usage. Employees learn how outdated or vulnerable browsers can be exploited and how malicious websites, ads and search results are used to spread malware.
The course covers practical measures such as keeping browsers and software up to date, safely managing extensions and plugins, recognising phishing websites and avoiding risky online behaviour. It also explains how to respond to suspected infections and why timely reporting to IT is essential.
Together, these two modules ensure employees not only recognise risks, but also know how to act safely while browsing the internet.
What will participants learn?
After completing this course, participants will:
- understand how URLs are structured and manipulated
- recognise misleading and malicious links
- know what HTTPS does and does not mean
- understand the risks of insecure or outdated browsers
- recognise phishing websites and malicious content
- know how to respond after clicking a suspicious link
Who is this course for?
This course is suitable for:
- all employees who use the internet and email
- organisations aiming to reduce phishing and malware risks
- teams focusing on human-centred security awareness
- non-technical users
Why this course is relevant right now
Most cyber incidents start with a link or website. By training employees in both URL recognition and secure browsing, organisations significantly reduce the risk of successful attacks.