Rocheston Cybersecurity Specialist (RCCS)

Most people already know they should not click suspicious links. The harder part is recognising a suspicious link when it arrives in a busy inbox, looks like it came from a colleague, and asks for something urgent. RCCS training builds that instinct through practice rather than slides. The Rocheston Cybersecurity Specialist (RCCS) course is a two-day cybersecurity awareness programme with 10 hands-on labs and 12 realistic scenarios. It is designed for people with no technical background.

The labs follow a natural order. Learners start by investigating a phishing email and detecting a fake login page, the two most common ways accounts are stolen. Next, they set up a password manager and multi-factor authentication, including recovery codes, so their own accounts are better protected. A social engineering role-play shows how attackers use pressure and trust, and exercises on safe browsing and public Wi-Fi cover everyday risks outside the office.

The later labs cover what happens at work. Learners classify data so they know what must be protected, run through an incident reporting drill, and complete a final cyber hygiene challenge that combines phishing, password risk, social engineering, and reporting in one scenario. Alongside the labs, scenarios such as a fake invoice, a lost device, a suspicious USB drive and smishing put the skills into realistic situations.

The course does not teach hacking. It teaches people to recognise, prevent and report. The result is behaviour that sticks. Learners who have practised spotting a fake login page and reporting an incident are far more likely to do it correctly at work. Rocheston’s wider portfolio is listed on our Rocheston training page.

Course Structure and Key Details

H2: How the RCCS Programme Is Structured

RCCS runs over two days and 24 awareness modules, moving from recognising threats to responding to them. The first day, Recognise Threats and Protect Yourself, covers how attackers target people and phishing in its main forms, including email, SMS (smishing), voice calls (vishing), and QR codes. It also covers social engineering, passwords and password managers, MFA, safe browsing, public Wi-Fi, malware and ransomware warning signs, and device and mobile safety.

The second day, Respond, Report and Build Safe Habits, teaches learners what to do when something goes wrong. Topics include reporting suspicious messages, responding to suspected account compromise, handling a lost or stolen device, and protecting sensitive data. They also include safe cloud and file sharing, social media, remote work, AI-powered scams and deepfakes, insider risk, and workplace policies. The day ends with scenario exercises and exam preparation.

Practical work includes ten labs: phishing email investigation, fake login page detection, password manager setup, MFA setup and recovery codes, social engineering role-play, safe browsing decisions, public Wi-Fi safety, data classification, an incident reporting drill and a final cyber hygiene challenge. Twelve scenarios and ten response playbooks give learners clear steps for common situations, such as a leaked password.

Rocheston offers RCCS as live instructor-led training online or in a classroom, as blended learning, or as self-paced study on Cyberclass. Our Muscat team can confirm which format suits your schedule. There are no prerequisites, and no technical background is needed.

The exam has 50 scenario-based multiple-choice questions, with two hours allowed and a 70% pass mark. It is taken online with RamSys proctoring, and a Rocheston certificate is awarded only to candidates who pass. Rocheston suggests RCCE Level 1, RSOC, CCO, or RCCI as next steps for those who want to go further.

Course Objectives

• Investigate a suspicious email and identify the signs that it is phishing.
• Detect fake login pages before entering any credentials.
• Set up and use a password manager to create and store strong passwords.
• Configure multi-factor authentication and keep recovery codes safe.
• Recognise social engineering tactics in calls, messages and face-to-face requests.
• Make safe choices when browsing and using public Wi-Fi.
• Classify data correctly and share it only through approved channels.
• Follow a clear reporting process when an incident is suspected.