Cyber Security for Non-Techies

Cybersecurity is no longer a technical issue reserved for IT departments — it is a core business, legal, and operational risk affecting every professional practice. From phishing and ransomware to insider threats and AI-driven attacks, cyber risks are becoming more sophisticated, targeted, and financially damaging.

This practical session is designed for non-technical professionals and provides a clear, accessible overview of today’s cyber threat landscape. It explains the most common attack types, how threats are evolving with AI, and the practical steps organisations can take to reduce risk through training, governance, infrastructure, and security controls.

Key Topics Discussed

• Overview of common cyber attack types
• Phishing, spear phishing, smishing, and whaling
• DDoS and denial-of-service attacks
• Man-in-the-middle (MITM) communication risks
• Ransomware and malware threats
• Password attacks and credential theft
• Fake URLs, DNS spoofing, and impersonation attacks
• Insider threats and organisational vulnerabilities
• AI-driven evolution of cyber threats
• Cybersecurity governance and internal controls
• Training and awareness programs
• Multi-factor authentication and access security
• Cybersecurity case studies and real-world incidents