DIGI-SEC-EXEC-COMMS-2D · intermediate · In person · 14 hours
Securing Executive & Corporate Communications: Practical Mobile, Messaging and Data Security
Overview
Leaders make high-impact decisions through email, WhatsApp, Teams, phone calls, video meetings and documents shared from mobile devices, and attackers exploit that convenience. This two-day applied workshop moves beyond awareness slides: participants practise defensive actions, compare secure and insecure workflows, and learn exactly what to do when something goes wrong. It is user-focused, so no administration privileges or technical background are needed.
Who should attend
Suitable for all levels, no technical background required. Basic ability to use a smartphone, email and office applications is enough.
- CEOs, CFOs, COOs, CIOs, directors and board members
- Executive assistants, personal assistants and chiefs of staff
- Finance, legal, procurement, HR and management staff handling confidential data or payment requests
- Sales, relationship-management and mobile teams who often work outside the office
- IT and security staff who support executives
What you will learn
- Identify high-risk communications and sensitive business information in everyday workflows.
- Secure a mobile device baseline: locking, updates, biometrics and passcodes, lost-device features, app permissions, screen privacy and backups.
- Explain the differences between device security, account security, message encryption and information protection.
- Use password managers, strong unique passwords, passkeys or phishing-resistant MFA where available, and recovery methods securely.
- Detect and independently verify business email compromise, CEO fraud, deepfake voice or video claims, malicious links, QR scams and credential prompts.
- Choose approved channels for confidential email, messaging, meetings and external collaboration.
- Classify, share, revoke and securely retain documents using organisation-approved tools and settings.
- Reduce risks from public Wi-Fi, travel, roaming, shared workstations and unattended devices.
- Follow a clear first-response procedure if a device is lost, credentials are exposed, content is mis-sent or a payment request seems fraudulent.
- Produce a personalised executive communications protection plan and an organisational follow-up checklist.
How it works
- Every topic follows the same flow: scenario, demonstration, apply, verify, decide
- About 75% guided practice, decision exercises and simulations
- Executives and IT work together: business participants decide the operational rule, IT participants identify the support and policy needed
- Each exercise ends with a verified checklist or agreed communication rule
- You never need to share personal messages, accounts or confidential files; all exercises use sample data.
What you take away
- Executive communications risk self-assessment
- iPhone/iPad and Android security checklists
- Laptop and travel security checklist
- Account, MFA and recovery readiness checklist
- Phishing, impersonation and urgent-payment verification card
- Communication-channel selection matrix
- Information classification and sharing checklist
- Secure Teams and video-meeting checklist
- Lost-device and account-compromise first-15-minutes response card
- Executive assistant delegated-access checklist
- A 30-day executive communications security improvement plan
Assessment and certificate
- Guided hands-on exercises: 40%
- Final integrated scenario: 35%
- Short knowledge check: 15%
- Personal 30-day action plan: 10%
- Pass mark: 70% overall, plus completion of the incident-response scenario
- Successful participants receive a Digilink Certificate of Completion, not an accredited professional certification.
What to bring
- Your smartphone and, if possible, a laptop. Personal devices are only used with your consent; demonstration devices and guided simulations are also available.
Modules
08:30–09:00 · Orientation, privacy rules and baseline self-assessment
Agree the consent and privacy ground rules and complete a private security baseline checklist.
09:00–10:00 · Module 1: Executive threat landscape and communication risk
Why leaders, assistants and finance staff are targeted, common attack paths and the communication lifecycle. Lab: map your communications exposure and produce a one-page risk map.
10:15–11:30 · Module 2: Protecting smartphones and tablets
iPhone, iPad and Android baselines: updates, screen lock, notification privacy, app permissions, lost-device features and backups. Lab: guided mobile-security check and hardening record.
11:30–12:30 · Module 3: Accounts, passwords, passkeys and MFA
Password managers, passkeys, phishing-resistant MFA, delegated access and account recovery. Lab: secure account access without exposing secrets, with an account-recovery decision tree.
13:30–14:30 · Module 4: Secure email and anti-impersonation
Business email compromise, invoice redirection, lookalike domains, QR phishing and independent verification. Lab: triage a suspicious executive inbox and log each decision.
14:30–15:20 · Module 5: WhatsApp, Signal, Teams and voice/video
Choosing the right channel, group-chat risks, voice cloning and meeting security. Lab: build a channel selection matrix and a safe-meeting checklist.
15:30–16:30 · Day 1 capstone: The urgent CEO request
A CFO receives an urgent payment change and an assistant is asked to email the board pack to a personal address. Teams verify, escalate and choose a secure alternative, then brief leadership in 60 seconds.
Digilink completion certificate, not a vendor certification