Cybersecurity Training
The DePaul Cybersecurity Clinic offers interactive workshops that help community nonprofits and students build practical cybersecurity knowledge and skills. Drawing on common needs identified through our work with nonprofit organizations, the workshops use realistic scenarios and hands-on activities to help participants recognize potential cyber threats, strengthen security practices, and prepare for responding to cyber incidents.
Workshops are offered in person at DePaul’s Loop Campus or virtually, depending on the program. Private workshops at an organization’s work site may also be available upon request.
How can AI make a fraudulent request appear trustworthy? In this interactive workshop, participants watch a video-recorded play depicting an unfolding $100,000 financial fraud against a fictitious credit union. The attack combines AI-enabled vishing and identity impersonation with AI-generated fraudulent documents to gain an employee's trust and exploit weaknesses in the organization's processes and controls.
Following the video, participants identify the security weaknesses that enabled the attack and discuss lessons learned. The workshop concludes with practical security and AI governance controls organizations can implement to reduce the risk of similar attacks.
Phishing remains a significant cybersecurity risk for nonprofit organizations, yet many nonprofits lack regular security awareness training. Through our cybersecurity risk assessments, Clinic student teams frequently identify employee security awareness and phishing preparedness as areas where organizations can strengthen their defenses.
This webinar shows nonprofits how simulated phishing campaigns can provide practical, hands-on security awareness training. Participants will see how a simulated campaign works, how training results can be used to identify opportunities for improvement, and how periodic exercises can help employees become more effective at recognizing and responding to suspicious email.
The webinar also provides a hands-on demonstration of GoPhish, a free, open-source phishing simulation platform. We demonstrate how to configure GoPhish for use with Google Workspace and how to create, launch, and evaluate a simulated phishing campaign. Participants receive a user guide to help them apply what they learn within their own organizations.
How would your organization respond in the critical moments of a cyberattack? This discussion-based tabletop exercise guides participants through a simulated cybersecurity incident, prompting them to consider how their organization would respond as the situation unfolds.
Participants explore the roles, responsibilities, decisions, and coordination needed during an incident and identify potential gaps in their organization's preparedness. Lessons from the exercise can help organizations develop or strengthen their incident response plans.