Module 15 · 11:19 video + 10-question quiz
Social Media and Your Digital Footprint
What you hand the attacker before they've done any work. What the photo gives away (the badge, the screen, the whiteboard, the lanyard, the time stamp, the location — open-source intelligence that costs nothing); what the profile gives away (your title says what you can approve, the systems you list say what to imitate, "I'm hiring" and the holiday countdown); the four questions before you post; the call that knows things about you — and why knowing your manager's name proves nothing; the fake recruiter and the "technical test" that is module 13's click fix in a suit; the WhatsApp hijack and the two settings that stop it; impersonation of you, the boss and the company; where the line is between your voice and the company's (the Labour Court's answer); the three family rules; and what to do when it's already out there.
Loading your module video…
The scenario
Friday, 16:05 — the end of your first week, and you post the photo: the new badge, the desk, the office behind you, "so proud to join", your manager's name. Monday, 08:20, "Sipho from IT support" phones: he knows your name, your manager, your start date, your badge number, and he just needs the code the app sent you. It was all in the photo.
The habit this module drills
Your footprint is the attacker's briefing — post as if they're reading.
After this module you can
- ✓Recognise what a post gives away — a badge, a screen, a whiteboard, your role, your routine, where you are — and strip it before you post.
- ✓Treat a request that knows things about you as no more trusted than one that doesn't: knowing your manager's name proves nothing.
- ✓Lock the accounts: two-step sign-in on every social account and two-step verification on WhatsApp — and never share a six-digit code.
- ✓Know the line between your voice and the company's, and report impersonation of you, the boss or the company when you see it.
What this module evidences: ISO/IEC 27001:2022 clause 7.3 (awareness) and Annex A control A.6.3 (information security awareness, education and training); POPIA Regulation 4(1)(e) (the Information Officer's duty to see that internal awareness sessions are held). The quiz result is recorded against your account, and passing it earns this module’s dated certificate.
Module 15 quiz
Ten “what would you do” scenario questions. Pass mark 80% — retake as often as you like. Pass it and this module’s certificate is issued in your name with the date; it is due again in twelve months. The quizzes and certificates come with a 12-month licence — for one person or for your company.
Loading…