Rocheston Cybersecurity Specialist (RCCS)

The Rocheston Cybersecurity Specialist (RCCS) course is a two-day cybersecurity awareness programme for employees and everyday users, with no technical background required.

Mobile and messaging threats are central to the course. Learners study smishing (scam text messages), vishing (fraudulent phone calls), and malicious QR codes alongside classic email phishing. They learn how social engineering uses urgency, authority, and trust, and how oversharing on social media helps attackers. Practical habits follow: strong passwords and password managers, multi-factor authentication, device and mobile safety, keeping software updated and using public Wi-Fi with care.

The course also covers what to do when something goes wrong. Learners practise reporting suspicious messages, responding to a possible account compromise, handling a lost or stolen phone and protecting sensitive data. Twelve scenarios, including smishing, MFA push bombing, a fake invoice and AI-generated phishing, connect the lessons to real situations. Ten labs, from phishing email investigation to a final cyber hygiene challenge, make sure the skills are practised.

The course does not teach hacking. It focuses on recognising, preventing and reporting threats. For banks, telecom operators and digital service providers, staff trained in these habits protect both the organisation and its customers. They are better placed to recognise fraud attempts and explain safe behaviour to the people they serve. Explore related options in our Rocheston programmes section.

Course Structure and Key Details

The two-day RCCS course contains 24 awareness modules. Day 1, Recognise Threats and Protect Yourself, covers cybersecurity fundamentals and how attackers target people. It goes on to phishing, smishing, vishing and QR code scams, social engineering, passwords and password managers, multi-factor authentication, safe browsing, public Wi-Fi, malware and ransomware warning signs, and device and mobile safety. Day 2, Respond, Report and Build Safe Habits, covers reporting suspicious messages, suspected account compromise, lost or stolen devices, sensitive data, cloud and file sharing, social media safety, remote work, AI scams and deepfakes, insider risk and workplace policies. It finishes with scenario exercises and exam preparation.

The ten hands-on labs are phishing email investigation, fake login page detection, password manager setup, MFA setup and recovery codes, social engineering role-play, safe browsing decisions, public Wi-Fi safety, data classification, an incident reporting drill and a final cyber hygiene challenge. Ten response playbooks give clear steps for situations such as a leaked password. The course is built around four core habits: recognise and report phishing, use strong passwords, turn on MFA and keep software updated.

Rocheston offers RCCS as live instructor-led training online or in a classroom, as blended learning, or as self-paced study on Cyberclass. Our Dar es Salaam team can confirm what is available for your group. For organisations, Rocheston also provides an incident reporting workflow, an awareness poster pack, a manager briefing template and completion records.

There are no prerequisites, and no technical background is needed. The exam consists of 50 scenario-based multiple-choice questions, with a two-hour limit and a 70% pass mark, and is proctored online through Ramsys. A Rocheston certificate is issued after passing. Rocheston suggests RCCE Level 1, RSOC, CCO or RCCI for further study.

Course Objectives

1. Recognise scam text messages, fraudulent calls and malicious QR codes.
2. Identify phishing emails and fake login pages before sharing any details.
3. Resist social engineering tactics that use urgency, authority or trust.
4. Protect mobile phones and other devices with updates, locks and safe settings.
5. Secure accounts with strong passwords, a password manager and multi-factor authentication.
6. Reduce risk on social media by limiting what personal information is shared.
7. Respond correctly to a lost phone, a compromised account, or a mistaken data share.
8. Report suspected fraud and security incidents promptly through the right channel.