PublishedISO 9001:2026 published 16 Sept 2026 · 2015 certificates must transition by 30 Sept 2029What changed →
Internal Auditor course (ISO 19011:2026):free until 31 Oct · then $59 for three monthsStart free now →

← Qlause Cyber Aware

Module 14 · 12:05 video + 10-question quiz

Cloud and Collaboration Tools

Where your information lives now — the shared drive, the chat, the video call, the link — and the quiet mistakes that give it away. How sharing really works (specific people, the whole organisation, anyone with the link — a key that copies itself) and why the AI assistant in your office suite makes old oversharing searchable; the sharing habit (one file, named people, view-only, an end date, invited from the tool); the chat as a company record and a public room; work in the company's tools, not personal ones; two-step sign-in on every cloud account (the 2024 cloud-data breaches: 165 organisations, no MFA); the attacks that arrive through the tools (the "help desk" on the chat, the shared-file lure, the meeting that wants an update); working with outside guests on purpose; and what to do when you've shared the wrong thing.

Loading your module video…

The scenario

Tuesday, 16:40 — the tender closes at five and the consultant needs the folder now. "Anyone with the link", the whole folder, pasted into a WhatsApp. Three weeks later IT shows you the access report: 41 opens from six countries — and last year's salary review.

The habit this module drills

In the cloud, sharing is a decision — who, what, for how long.

After this module you can

What this module evidences: ISO/IEC 27001:2022 clause 7.3 (awareness) and Annex A control A.6.3 (information security awareness, education and training); POPIA Regulation 4(1)(e) (the Information Officer's duty to see that internal awareness sessions are held). The quiz result is recorded against your account, and passing it earns this module’s dated certificate.

Module 14 quiz

Ten “what would you do” scenario questions. Pass mark 80% — retake as often as you like. Pass it and this module’s certificate is issued in your name with the date; it is due again in twelve months. The quizzes and certificates come with a 12-month licence — for one person or for your company.

Loading…

Security awareness & ISO 27001

Building security awareness or an ISMS at your organisation?

Rolling out awareness training, preparing for ISO 27001, or working through what POPIA or GDPR means for your team? Tell us where you are. We'll look at it and suggest a practical next step, or connect you with people we trust who can help.

Email hello@qlause.app

No sales pitch, no obligation — we read every message.