Rocheston Cybersecurity Specialist (RCCS)

The Rocheston Cybersecurity Specialist (RCCS) course is a two-day cybersecurity awareness programme that teaches people to recognise threats, respond safely and report quickly. Recognition comes first. Learners study how attackers target people through phishing, smishing, vishing, QR code scams and social engineering, as well as newer AI-generated phishing and deepfakes. They also learn the protective habits that make attacks harder: strong passwords, password managers, multi-factor authentication, safe browsing, and keeping software updated.

Response and reporting take up most of the second day. Learners practise what to do when a message looks suspicious, an account may be compromised, a device is lost or stolen, or sensitive data is shared by mistake. Ten response playbooks, such as the leaked password playbook, give clear steps. An incident reporting drill builds the confidence to raise the alarm without hesitation. Twelve realistic scenarios, including a CEO gift card scam, MFA push bombing and a compromised coworker account, test those skills.

No technical background is needed, and the course does not teach hacking. For organisations, faster and more accurate reporting gives security teams earlier warning and more time to contain incidents. Explore further options in our Rocheston courses hub.

Course Structure and Key Details

The RCCS course runs over two days and 24 awareness modules. Day 1, Recognise Threats and Protect Yourself, covers cybersecurity fundamentals, how attackers target people, phishing, smishing, vishing and QR code scams, and social engineering. It also covers passwords and password managers, multi-factor authentication, safe browsing, public Wi-Fi, malicious attachments and links, malware and ransomware warning signs, and device and mobile safety.

Day 2, Respond, Report and Build Safe Habits, covers reporting suspicious messages, responding to suspected account compromise, and handling lost or stolen devices. It also covers protecting sensitive data, cloud and file sharing, social media, remote work, AI scams and deepfakes, insider risk, incident reporting and response, and workplace policies and compliance. The day closes with scenario exercises and exam preparation.

The ten hands-on labs are phishing email investigation, fake login page detection, password manager setup, MFA setup and recovery codes, social engineering role-play, safe browsing decisions, public Wi-Fi safety, data classification, an incident reporting drill and a final cyber hygiene challenge. For organisations, Rocheston provides an incident reporting workflow, an awareness poster pack, a manager briefing template and completion records.

Rocheston offers RCCS as live instructor-led training online or in a classroom, as blended learning or as self-paced study on Cyberclass. Contact our Doha advisors for the format available to your team. There are no prerequisites, and no technical background is required.

The RCCS exam has 50 scenario-based multiple-choice questions, with two hours allowed and 70% needed to pass. It is delivered online through RamSys proctoring. A certificate is awarded only after passing the exam. Rocheston recommends RCCE Level 1, RSOC, CCO, or RCCI as next steps.

Course Objectives

1. Report suspicious emails, messages and calls quickly through the correct channel.
2. Respond safely to a suspected account compromise or a lost or stolen device.
3. Follow response playbooks for common incidents such as leaked passwords.
4. Recognise phishing, smishing, vishing, QR code and AI-generated scams.
5. Resist social engineering, including executive impersonation and fake IT support.
6. Protect accounts with strong passwords, password managers and MFA.
7. Handle sensitive data and file sharing in line with workplace policies.
8. Apply four core habits: report phishing, use strong passwords, turn on MFA, and update software.