← Back to overview

What Are You Responsible For?

You start your workday calmly. Laptop open, coffee ready. Then you see an email that feels slightly off. What do you do? Click through, or pause for a moment? That decision can make all the difference.

The e-learning What Are You Responsible For? shows that information security and privacy are not abstract concepts, but daily responsibilities. The course highlights that employees play a crucial role because they are best positioned to notice when something is out of the ordinary.

Participants follow Joris, who receives an email that appears to come from a colleague, requesting confidential documents via a link. Because he hesitates and verifies the request by phone, a phishing attack is detected and a data breach is prevented. This scenario demonstrates the power of awareness, common sense and reporting.

The course emphasises that information security is not just about technology. Human behaviour matters. Employees learn to recognise warning signs such as:


  • unusual requests
  • sudden urgency
  • unexpected communication channels
  • unfamiliar links or attachments

The focus then shifts to prevention through awareness. Pausing before clicking, questioning whether a request makes sense and verifying when in doubt. Technology can help, but human judgement is irreplaceable.

Reporting is another key theme. If something feels wrong, report it. Every signal matters. Early reporting allows organisations to respond faster and prevent greater damage. Reporting is presented as a strength, not a burden.

Privacy in daily practice is also addressed. Handling customer and employee data with care, sharing information only with authorised individuals and asking questions when unsure. Employees learn that privacy officers and security specialists are there to support them.

The course also highlights responsibility beyond working hours. Personal online behaviour matters too: what you share on social media, how you secure your accounts and whether you install updates. Small actions have a big impact.

The course concludes with a positive message: you are not the weakest link, you are a key defender. By staying alert and supporting each other, organisations build a culture where security is a shared responsibility.

What will participants learn?

After completing this course, participants will:

  • understand their role in information security and privacy
  • recognise suspicious signals in communication
  • know how and when to act if something feels wrong
  • understand why reporting is always important
  • handle personal and sensitive data responsibly
  • remain aware and alert, even outside work

Who is this course for?

This course is suitable for:

  • all employees, regardless of role or technical background
  • organisations embedding security awareness organisation-wide
  • teams aiming to reduce incidents caused by human error
  • employees wanting clarity about their responsibilities

Why this course is relevant right now

Most security incidents start with human interaction. Making employees aware of their responsibilities significantly strengthens organisational resilience.