Compliance & Regulation · Professional · MBE™
FOCS
Compliance & RegulationProfessional level
30 Hours20 Modules
Self-pacedLearn at your own pace
CertificationEarn an MBE™ CredentialMost incidents begin with an ordinary action by an ordinary employee: a link clicked, a password reused, a caller trusted. Technical controls cannot cover for that, which is why attackers concentrate on people. The program is written for the non-specialist.
It explains who is behind attacks and what they are after, sets out confidentiality, integrity and availability in plain terms, then works through the daily decisions on passwords, messages, downloads, data and networks where a good habit makes the difference.
What you take away
Threat awarenessAuthentication hygienePhishing recognitionSocial engineering resistanceBecause the material assumes no technical background, the natural cohort is the entire workforce rather than a specialist group. Office and administrative staff, who process the invoices and calendar invites that phishing imitates, are the primary audience. HR and finance teams hold the data attackers most want.
Managers and team leaders set the tone for whether a colleague admits to a clicked link. Remote and hybrid workers face home routers and public Wi-Fi that the office firewall never sees. IT support and helpdesk staff field the first call when something goes wrong, and compliance officers can map each module to the obligations they already track.
Mastering Business ExcellenceCertification terms and policies applyAcross 20 modules the sequence runs from understanding to habit. Modules one to four establish why security is everyone's job, who is attacking, the core principles and the human factor. Modules five to ten each target a behavior: authentication, social engineering, malware, safe browsing and email, data protection and network security.
Modules 11 to 15 extend that to devices, security tools, remote and hybrid work, shadow AI and emerging threats. Modules 16 to 19 draw lessons from real breaches, teach incident response and reporting, introduce governance and compliance, and show how a security-aware culture is built. The capstone has each participant assemble a personal and organizational security plan.
Complete the course assessments to earn the FOCS credential
That is the design brief. Encryption is explained without the mathematics, networks are described in terms of where they break rather than how they are engineered, and each behavior module points to a habit a person can adopt the same day. The vocabulary builds gradually, so an administrative assistant and a helpdesk technician can sit in the same cohort without either being left behind.
It comes up in more than one place. The threat landscape module explains how AI and automation have changed the volume and polish of attacks, and the phishing and social engineering module looks specifically at AI-written lures and deepfake voice scams that imitate a manager or supplier. The response taught is the same in every case: pause, verify through a second channel, then act.
Module five covers the full authentication picture: what separates a strong password from a weak one, how a password manager removes the burden of remembering them, how multi-factor authentication works day to day, and where passkeys and passwordless sign-in are heading. For an IT team the benefit is a workforce that understands why the controls already deployed exist and uses them properly.
Both settings run through the program. Module eight covers safe browsing and public Wi-Fi habits for people working from cafes and airports, module nine covers protecting data and backups on devices that leave the building, and module ten walks through home router security, Wi-Fi configuration and when a VPN is the right tool. Hybrid teams get one consistent standard wherever they log in from.
Completion is visible on the administrator dashboard, which lists every enrolled employee with their progress and completion status. Because the content is self-paced on the Blue Ocean learning platform, an HR or IT administrator can set an internal deadline, watch the cohort move toward it and nudge the stragglers, all without organizing a single session or collecting attendance sheets.
Blue Ocean Corporation issues each of them a digital, verifiable MBE credential once the modules, knowledge checks and practice assessments are complete. Employees can add it to their professional profiles, and the organization retains a completion record for each person on the dashboard. For a company answering a customer security questionnaire, that record is a concrete answer to the question of how staff are trained.
Use the Register Now button on this page. It opens Fundamentals of Cybersecurity on the Blue Ocean Academy website, where you can enroll and start learning at your own pace.
Self-Paced OnlineStudy at Your Own Pace, AnytimeLive, Instructor-LedNot Offered for This Program
Corporate TrainingTailored Delivery for Your TeamYour MBE credential is issued digitally and can be verified by employers. It carries the Mastering Business Excellence name, so you can add it to your professional profile as soon as you complete the course.
Digital Certificate
Verifiable Credential
Professional Recognition
Credential Holder Profile
Find your course
Explore Mastering Business Excellence courses by domain and level
