Would your team know it's a scam?
Lessons from IT is a free cyber security course for everyone in your business, not just the IT people. Eight short memos, written in plain English from real incidents I've worked on.
- £0
- 8 short memos
- About 45 minutes
- Certificate
- No sign-up
Eight memos from IT
Each lesson lands like a memo in a mock office inbox. They follow the five Cyber Essentials controls, the UK government backed baseline against the most common attacks.
- Memo 01All five
Why would anyone hack us?
Why every business is a target, and what criminals are actually after.
- Memo 02Malware protection, user access control
That email isn't from your boss
Phishing, invoice fraud and the fake “quick favour”.
- Memo 03User access control
Your password is probably Summer2026!
Passphrases, password managers and multi-factor authentication.
- Memo 04Security update management, secure configuration
Yes, you do have to restart
Updates within 14 days, screen locks and unsupported devices.
- Memo 05Malware protection, secure configuration
Where did you download that?
Malware, approved software, macros and USB sticks found in the car park.
- Memo 06Firewalls, secure configuration
The café Wi-Fi isn't your friend
Public Wi-Fi, firewalls, working from home and lost devices.
- Memo 07User access control
Who has the keys?
Admin accounts, least access, starters and leavers.
- Memo 08All five
Something's wrong. Now what?
Spotting an incident and reporting it fast, without blame.
Three steps, about five minutes of your time
- 1
Send your team the link
Use the message below, or drop the link in Teams or WhatsApp.
- 2
Collect the certificates
Ask everyone to send you their PDF when they finish. Keep them in one folder as your training record.
- 3
Repeat it every year
And add it to your new starter checklist, so it happens in their first week.
- To
- Everyone
- Re
- Quick cyber security course, by end of next week
Hi all, please complete Lessons from IT, a free cyber security course by fromIT, by the end of next week. It's eight short memos (about 45 minutes in total) and you can do it on your phone. When you've finished, please send me your certificate PDF. Link: https://learn.fromit.co.uk/
Want the detail? The guide for business owners covers what each memo teaches and how it maps to Cyber Essentials.
Training covers the people. Cyber Essentials covers the rest.
Cyber Essentials checks your devices, accounts and settings. The course helps your team keep those controls working: accepting updates, using multi-factor authentication and speaking up quickly when something looks wrong.
Free tool · about seven minutes See how close your business is to Cyber Essentials. 28 plain-English questions mapped to the official question set. You'll get a score and a list of what to fix first. Private, with no sign-up. Check your readinessReady to certify? See the fixed-price Cyber Essentials packages. Already had a scare? That's a cyber incident, and I can help today.
Course questions
Is it really free?
Yes. No sign-up, no trial and no catch. I built it because most of the incidents I deal with start with one person clicking one thing, and a short, decent course is the cheapest fix there is.
Do you collect any personal details?
No. There's no account and no sign-up. Progress is saved in each person's own browser, and the certificate is made on their device. I only see anonymous page statistics.
Can I see who has finished?
Not yet. For now, ask everyone to send you their certificate when they finish and keep the PDFs in a folder. Team tracking for managers is planned.
Does it count towards Cyber Essentials or ISO 27001?
Yes, it helps. Cyber Essentials is mostly about your devices, accounts and settings, but the question set also asks how you help staff with things like creating strong passwords. The course covers that, and the certificates show it happened. For ISO 27001, awareness training is a requirement (Annex A 6.3), and dated certificates are good evidence it happened.
How often should staff do it?
Once a year, and in every new starter's first week. Cyber insurers and supplier questionnaires often ask about awareness training, and a folder of dated certificates is a simple, honest answer.
Would you rather run it live?
I can. A one hour remote staff security session for your whole team is £395, or it comes as an add-on to any Cyber Essentials package.
Team trained. What's next?
If you'd like a hand with Cyber Essentials, ISO 27001 or anything that's worrying you, book a 30 minute call. No obligation, no sales script.