Rocheston Cybersecurity Specialist (RCCS)

The Rocheston Cybersecurity Specialist (RCCS) course is a two-day cybersecurity awareness programme for people with no technical background. It gives them practical habits that protect their accounts, devices, and data at work and at home.

The course starts with the basics: what cybersecurity means, how attackers target people and why ordinary users are often the first target. From there, learners build skills one at a time. They learn to spot phishing emails, scam text messages, fake phone calls and malicious QR codes, to create strong passwords with a password manager and to turn on multi-factor authentication. They also practise browsing safely and using public Wi-Fi with care.

The second day turns these skills into confident action. Learners practise reporting suspicious messages, responding to a possible account compromise, dealing with a lost phone or laptop, and sharing sensitive files safely. Newer risks, such as AI-generated scams and deepfakes, are covered in plain language.

Ten hands-on labs and 12 realistic scenarios keep the learning practical, and the course ends with a scenario-based exam. It does not teach hacking. Its focus is recognising, preventing, and reporting.

The lasting benefit is confidence. Learners leave knowing how to protect themselves, their families and their employers, and they have a recognised certificate after passing the exam. Related programmes are listed on our Rocheston training portfolio page.

Course Structure and Key Details

RCCS is a two-day course made up of 24 awareness modules. The first day, Recognise Threats and Protect Yourself, introduces cybersecurity fundamentals and shows how attackers target people. It then covers phishing, smishing, vishing, and QR code scams, social engineering, passwords and password managers, multi-factor authentication, safe browsing, public Wi-Fi, malware and ransomware warning signs, and device and mobile safety.

The second day, Respond, Report and Build Safe Habits, teaches learners how to act. Topics include reporting suspicious messages, responding to a suspected account compromise, handling a lost or stolen device, protecting sensitive data, and sharing files safely in the cloud. It also covers social media, remote work, AI-powered scams and deepfakes, insider risk, and workplace policies. The day ends with a final scenario review and exam preparation.

The course is practical throughout. Ten labs cover phishing email investigation, fake login page detection, password manager setup, MFA setup and recovery codes, social engineering role-play, safe browsing decisions, public Wi-Fi safety, data classification, an incident reporting drill and a final cyber hygiene challenge. Twelve real-world scenarios, from a fake invoice to a smishing message, help learners apply what they practise.

Before enrolling, learners only need to know that there are no prerequisites. No technical background is required, and the course suits students, employees, parents, job seekers, small business owners and anyone who uses email, smartphones, cloud apps or online banking.

Rocheston offers RCCS as live instructor-led training online or in a classroom, as blended learning, or as self-paced study on Cyberclass, and our Addis Ababa team can confirm which format is available. The exam has 50 scenario-based multiple-choice questions, with two hours allowed and a 70% pass mark, and it is taken online with RamSys proctoring. A certificate is issued only to candidates who pass. Learners who want a career in security can continue to RCCE Level 1, RSOC, CCO, or RCCI.

Course Objectives

1. Explain basic cybersecurity terms and why attackers target ordinary users.
2. Identify scam emails, text messages, phone calls, and QR codes.
3. Use a password manager to create and protect strong, unique passwords.
4. Turn on multi-factor authentication and keep recovery codes safe.
5. Keep phones, laptops and software secure and up to date.
6. Use the internet and public Wi-Fi safely at work and at home.
7. Recognise warning signs of malware, ransomware, AI scams and deepfakes.
8. Know exactly what to do and whom to tell when something goes wrong.