Rocheston Cybersecurity Specialist (RCCS)

RCCS training shows everyday users how these tactics work, so they can recognise them and stop them. The Rocheston Cybersecurity Specialist (RCCS) course is a two-day cybersecurity awareness programme for employees and individuals, with no technical background required.

Understanding the attacker’s playbook is where the course begins. Learners see how attackers choose targets, gather information from social media, and use email, text messages, phone calls, and QR codes to deliver scams. They study social engineering techniques such as impersonation and pressure, and newer threats such as AI-generated phishing, deepfakes, and MFA push bombing.

With that understanding in place, learners build defensive habits. They use password managers and strong passwords, turn on multi-factor authentication, browse safely, take care on public Wi-Fi, protect devices, and keep software updated. On the second day, they practise responding and reporting: what to do about a suspicious message, a compromised account, a lost device, or data sent to the wrong person.

Ten hands-on labs and 12 realistic scenarios keep the learning practical. The course does not teach hacking. Its purpose is to help people recognise, prevent, and report attacks.

For organisations, RCCS turns employees into an early warning system. Staff who understand how attackers operate report problems sooner, which gives security teams time to act before an incident spreads. Rocheston’s wider portfolio appears on our Rocheston cybersecurity certifications page.

Course Structure and Key Details

Rocheston Cybersecurity Specialist training runs over two days and contains 24 awareness modules. Day 1, Recognise Threats and Protect Yourself, covers cybersecurity fundamentals, threat awareness and how attackers target people. It then covers phishing, smishing, vishing and QR code scams, social engineering, passwords and password managers, multi-factor authentication, safe browsing, public Wi-Fi, attachments and links, malware and ransomware, device security and software updates. Day 2, Respond, Report and Build Safe Habits, covers data privacy, cloud and file sharing, social media, remote work, AI and deepfakes, insider risk, incident reporting and response, and workplace policies and compliance. It ends with a final scenario review and exam preparation.

The ten labs are phishing email investigation, fake login page detection, password manager setup, MFA setup and recovery codes, social engineering role-play, safe browsing decisions, public Wi-Fi safety, data classification, an incident reporting drill, and a final cyber hygiene challenge. The 12 scenarios are a fake IT support email, a fake invoice attachment, a CEO gift card scam, MFA push bombing, a public Wi-Fi trap, a lost device, a suspicious USB drive, oversharing on social media, smishing, a compromised coworker account, data sent to the wrong recipient, and AI-generated phishing. Ten response playbooks give learners clear steps for common incidents.

Rocheston offers RCCS as live instructor-led training online or in a classroom, as blended learning, or as self-paced study on Cyberclass. Training includes Cyberclass access, checklists, and reporting guides. For teams, Rocheston adds an incident reporting workflow, an awareness poster pack, a manager briefing template, and completion records. There are no prerequisites, and no technical background is needed.

The RCCS exam contains 50 scenario-based multiple-choice questions, with two hours allowed and a 70% passing score. It is delivered online with RamSCS proctoring. A certificate is issued after passing. Recommended next steps are RCCE Level 1, RSOC, CCO and RCCI. Delivery format, dates, and exam inclusion vary by training package, so confirm them with our team when you enquire.

Course Objectives

• Explain how attackers select, research and manipulate their targets.
• Recognise phishing, smishing, vishing, QR code and AI-generated scams.
• Resist social engineering, impersonation and MFA push bombing.
• Protect accounts with strong passwords, password managers and multi-factor authentication.
• Use devices, browsers, public Wi-Fi and cloud services safely.
• Handle sensitive data and file sharing according to workplace policy.
• Respond correctly to suspected compromise, lost devices, and data sent in error.
• Report incidents quickly and clearly to the right people.