Cybersecurity training for website owners and the people who manage them.

Website owners often control domains, DNS, hosting, admin accounts, analytics, email marketing and payment integrations. One compromised identity can therefore affect several business systems at once.

Common themes include fake domain expiry, fake hosting suspension, “copyright infringement” attachments, Search Console warnings, plugin renewal notices, password-reset messages and fake customer enquiries containing malicious links.

Yes if they manage social accounts, websites, advertising, email lists or shared drives. Marketing teams are attractive targets because they often have public-facing email addresses and access to high-value publishing accounts.

Account takeover, fake orders, chargeback/fraud indicators, suspicious refund requests, payment-gateway security, customer-data handling and how to escalate an incident without deleting evidence.

Training should not be a one-off tick-box exercise. Reinforce it periodically and when systems, threats or staff roles change. Short practical refreshers can be more useful than repeating the same generic slide deck annually.

Practise who can take the site offline safely, who controls DNS and hosting, where clean backups are stored, how credentials are rotated, who talks to customers and suppliers, and who assesses whether personal data has been affected.

39Security runs practical small-business cybersecurity training. Use the links below to see the current programme and upcoming training events.