Your Cybersecurity Summary and Action PlanUpdated: 2026

Every module in this training gave you one key habit. Here's the full list to display, print, or share:

1. M01 — Think in layers of defense: no single protection is foolproof. Combine MFA + strong password + updates + backups.
2. M02 — Verify before you obey: any urgent, unusual request (transfer, password, access) must be confirmed through another channel.
3. M03 — Check the sender and the URL: the real domain is what comes right before the .com/.ca. An email from "rbc-alert.com" isn't RBC.
4. M04 — Use a password manager: one unique, strong password per site, stored in Bitwarden, 1Password or similar.
5. M05 — Never pay a ransom without consulting someone: paying funds crime and doesn't guarantee recovery. Isolate, report, restore.
6. M06 — Check HTTPS and the sender: a padlock ≠ a legitimate site, but no padlock = guaranteed leakage of anything you type.
7. M07 — Exercise your rights over your data: you can request access, correction and deletion of your personal data.
8. M08 — Avoid public Wi-Fi without a VPN: on an uncontrolled network, all your unencrypted communications are readable.
9. M09 — Encrypt your devices and enable locking: a stolen, unlocked phone = all your data accessible.
10. M10 — Back up using the 3-2-1 rule: 3 copies, 2 different media, 1 offsite (or cloud). Test the restore.
11. M11 — Lock your screen the moment you step away: Win+L or Cmd+Ctrl+Q. Shoulder surfing and physical access are real risks.
12. M12 — Set your social media privacy settings: your public posts feed targeted OSINT attacks.
13. M13 — Call the person back at their usual number: facing an urgent call or video request, hang up and call back at a number you already know.
14. M14 — Isolate and document from the first sign: disconnect from the network, take screenshots, don't power off, alert IT.
15. M15 — Keep your vigilance over time: threats evolve. Follow a news source, join simulations, train the people around you.

Cybersecurity is built through gradual habits. Here's a realistic plan, week by week:

Effective cybersecurity isn't a single tool, but a series of layers that complement each other. If one layer fails, the others limit the damage.

An attacker who bypasses your password (e.g., a database leak) will be stopped by MFA. Ransomware that encrypts your files will be neutralized by your backups. That's what professionals call resilience: the ability to absorb an attack without disaster.

Cyber threats evolve quickly. What you've learned today will still be relevant in 5 years — the core principles (verify, back up, limit access) don't change — but new tactics constantly emerge.

Subscribe to the Canadian Centre for Cyber Security's email alerts. You'll get warned as soon as a major threat affects Canadians.

Cybersecurity is a team effort. A single untrained person on a team can compromise the whole group. That's why security culture matters as much as technical tools.

Check off what you've already put in place. Automatically saved in your browser.

You've completed all 15 modules of the ObjectifCyber training. That's a significant milestone — you now have a solid understanding of cyber threats and practical countermeasures.

If you're not yet confident about certain modules, reread the corresponding lessons. Modules 03 (phishing), 04 (passwords) and 14 (incidents) are the most represented in the final test.