← All courses

Awareness · Security at work

Information Security Essentials

Make informed security decisions part of everyday work.

Help your people recognise phishing, payment fraud and other common threats, and understand safer ways to use passwords, information and AI tools.

Secure payment by Stripe · for yourself or for your team

Standard and edition

Last updated26 September 2026

Preview this course

Experience the learning
before you enrol.

Watch a sample from Information Security Essentials before you enrol.

Information Security EssentialsSample

Learning outcomes

Knowledge you can put to work.

Connect the subject to the responsibilities and decisions people encounter in their roles.

  • Recognise common phishing and payment fraud scenarios.
  • Understand safer password and information-handling practices.
  • Recognise risks when using AI tools at work.

Part of: Information Security and ISO 27001 Training

Inside the course

A clear path through the essentials.

10 modules, 10 practice checkpoints and a final exam. Video runtimes are approximate; allow additional time for the practice questions and the final exam.

Part 1Module 1Approx. 10 min
  1. Phishing: e-mail, texts, calls, QR codes, chat apps10 min
  2. Practice: Phishing: e-mail, texts, calls, QR codes, chat apps3 questions
Part 2Module 2Approx. 9 min
  1. Payment fraud and impersonation9 min
  2. Practice: Payment fraud and impersonation3 questions
Part 3Module 3Approx. 9 min
  1. Passwords, MFA and your accounts9 min
  2. Practice: Passwords, MFA and your accounts3 questions
Part 4Module 4Approx. 9 min
  1. Handling and sharing information9 min
  2. Practice: Handling and sharing information3 questions
Part 5Module 5Approx. 10 min
  1. Data privacy for everyone10 min
  2. Practice: Data privacy for everyone3 questions
Part 6Module 6Approx. 9 min
  1. Working safely anywhere9 min
  2. Practice: Working safely anywhere3 questions
Part 7Module 7Approx. 11 min
  1. Devices, updates, malware and ransomware11 min
  2. Practice: Devices, updates, malware and ransomware3 questions
Part 8Module 8Approx. 9 min
  1. AI tools and unapproved apps9 min
  2. Practice: AI tools and unapproved apps3 questions
Part 9Module 9Approx. 7 min
  1. Physical security and the clear desk7 min
  2. Practice: Physical security and the clear desk3 questions
Part 10Module 10Approx. 9 min
  1. Spot it, report it: your part9 min
  2. Practice: Spot it, report it: your part3 questions

Frequently asked questions

Your questions,
answered.

About Information Security Essentials, its certificate and enrolment.

Ask Sterling
Who is Information Security Essentials for?

It is for employees who handle business information in any role: office, operations, sales, finance or support. It needs no technical background. The course helps people recognise the everyday threats that reach them by e-mail, phone and message, and build safer habits at work. It is also a natural first step before Sterling Academy's ISO/IEC 27001:2022 Awareness course.

What does the Information Security Essentials course cover?

The course helps your people recognise common phishing and payment fraud scenarios, understand safer password and information-handling practices, and recognise the risks of using AI tools at work. It focuses on practical decisions that employees make every day, so that informed security choices become part of normal work rather than a once-a-year compliance exercise.

How long does Information Security Essentials take?

Information Security Essentials is a set of short video modules followed by practice questions and a final exam. The course page shows the current number of modules and the approximate video runtime; allow additional time for the practice questions and the exam. With 12 months of access, you can complete it in one sitting or spread it over several sessions.

Do learners receive a certificate?

Yes. Learners who reach the 70% pass mark in the final exam receive a Sterling Academy Certificate of Completion for Information Security Essentials. Each certificate carries a unique number and a QR code, and anyone can check it online using the certificate number and the holder's surname. It is a training certificate for the individual learner.

Is the course online and self-paced?

Yes. Information Security Essentials is a self-paced online course made of short video modules, in English with captions. You study at your own pace during 12 months of access, and practice questions after modules help you check your understanding before the final exam. If a point is unclear, questions are answered by a Sterling consultant.

Can we enrol a team, and how much does it cost?

Information Security Essentials is US$19 per learner. Teams save 20% for 11 to 50 learners and 30% for 51 to 200 learners; 201 or more learners are priced on request. Client administrators can track their team's progress. Prices are in US dollars, excluding taxes, and Sterling confirms final pricing and enrolment.

Is this course a certification for our organisation?

No. The Certificate of Completion is a training certificate: it shows that one person completed Information Security Essentials and reached the pass mark in its final exam. It is not certification of an organisation to any information security standard, and Sterling does not certify organisations. An organisation is certified by an independent certification body after that body's own audit.

Does the course cover the safe use of AI tools at work?

Yes. Alongside phishing, payment fraud, passwords and information handling, Information Security Essentials helps learners recognise the risks that arise when using AI tools at work. The aim is for employees to make informed security decisions about what information they share and how they use such tools, as part of everyday work.

Learning path

Where this course sits.

This course

Information Security Essentials

Recognise cyber threats and build safer habits at work.

Next step

ISO/IEC 27001:2022 Awareness

Help every employee understand their role in protecting information.

View course

Assessment & completion

Complete the learning.
Keep a verifiable record.

Learners who complete the course and its final exam receive a numbered Sterling Academy Certificate of Completion with online QR verification.

This records course completion. It does not confer ISO certification or a professional auditor qualification.

Pass mark
70%
Prerequisites
None
Training records
Supports the awareness requirement of ISO/IEC 27001:2022 (clause 7.3) and control 6.3 of ISO/IEC 27002:2022 (awareness, education and training), with a dated record of who completed the training and their final exam result.
Ask about course requirements

Your next step

Ready to implement ISO/IEC 27001?

Expert and experienced consultants, 8,100+ client engagements in 60+ countries, from gap assessment to a system ready for its certification audit.

Talk to a Sterling consultant

Run it in Effivity

Effivity is our no-code ISO and GRC software: documents, risks, audits, nonconformities and corrective actions, objectives and training records in one place.

Start an Effivity trial

Not sure which course?

Plan your next step
in learning.

Discuss your learning needs