Phishing Awareness Session for Non-Technical Staff
Plan a 30-minute session with exercises people remember.
The Open buttons send the prompt text as currently shown below to that site only when you click. Fill in the placeholders first.
[VERIFY] is an editorial flag, not a blank to fill. Wherever the prompt shows [VERIFY], check that item against a reliable source before you use it.
Plan a 30-minute phishing awareness session for non-technical staff at [ORGANISATION_TYPE]. Audience size and roles: [AUDIENCE]. Tools they use daily (email, messaging, shared drives, invoices): [TOOLS_USED]. Real examples of suspicious messages we have received, with identifying details removed: [EXAMPLE_MESSAGES]. Build the session minute by minute: a three-minute story that shows what a successful phish costs, a ten-minute exercise where people spot red flags in six sample messages that you write in the style of my examples (clearly fictional, with invented company names), a five-minute demonstration of how to check a sender and a link without clicking, a five-minute section on what to do after clicking (who to tell, how fast, no blame), and a five-minute quiz of five questions with answers. Provide the handout as a one-page checklist in plain language. Add a follow-up plan for the next three months: a short reminder each month and a measure that rewards reporting rather than punishing clicks. Quality bar: no jargon without a plain explanation, no shaming language, and every red flag explained in one sentence. Add the full text of the six fictional sample messages you will use in the red-flag exercise, each with an answer key listing its warning signs and one that is genuinely legitimate so people learn not to distrust everything. Use invented companies, names and web addresses that cannot be real, and keep each message under 90 words. Add a facilitator script of the first three minutes, a list of the five questions people most often ask (such as why a message looks so convincing) with plain answers, and a plan for measuring the session: a short pre-session and post-session quiz of the same five questions, plus the reporting rate during the following month. Include accessibility adjustments for remote attendees and for staff who read in a second language. Defensive guidance only, with no step-by-step attack methods. Mark anything that depends on my environment as [VERIFY] before I act on it.
Fill in before use
Optional: type your details and the prompt above updates. Nothing is saved or sent.
Replace each bracketed placeholder with your own details, then paste into Any AI or another assistant.