Information Security
Classify and handle information correctly, control who gets access, protect paper, devices and backups, and report security incidents quickly under your organisation's policy.
What you'll learn
- Explain confidentiality, integrity and availability and apply them to the information you handle every day
- Identify the information assets in your area, who owns them and who looks after them
- Classify information as public, internal, confidential or restricted and follow the handling rules for each level
- Apply acceptable use, access control and least privilege, including the joiners, movers and leavers process
- Protect information on paper and devices through clean desk, clear screen, physical security and secure disposal
- Check that backups, third parties and cloud services meet the organisation's security requirements
- Describe how ISO 27001 and the Bank of Ghana Cyber and Information Security Directive shape an organisation's approach
- Recognise an information security incident and report it quickly through the right channel
Who this course is for
- All staff in private companies, banks, NGOs and public institutions who handle information of any kind
- Public servants in MDAs and MMDAs who keep records, run registries or manage revenue, payroll and case files
- System administrators, IT officers, records officers and data owners who grant access or look after sensitive information
- Managers who approve access, sign contracts with suppliers or lead teams that handle customer and staff data
- Staff of banks, savings and loans companies and other institutions regulated by the Bank of Ghana
Course content
6 sections · 26 lessons · 3h 59mStart here 3 lessons · 14 min
Module 1: What information security protects 5 lessons · 45 min
Module 2: Classifying and handling information 5 lessons · 47 min
Module 3: Access, people and partners 5 lessons · 50 min
Module 4: Physical security, backups and incidents 5 lessons · 47 min
Final module: Putting it to work 3 lessons · 36 min
Before you start
- No technical or IT background is needed
- A phone, tablet or computer with internet access
- A copy of your organisation's information security, acceptable use or data protection policy is helpful but not required
About this course
Most information security failures in Ghanaian organisations do not need a hacker. A staff list is left on the photocopier. A former officer's login still works three months after she resigned. A laptop holding every customer's loan file is sold with the old office furniture. The only backup of the revenue database sits on a hard drive in the same room as the server, and the room floods.
This course is about how an organisation manages its information: the policies, the habits and the decisions that keep information confidential, accurate and available. It is written for all staff in companies and public institutions, and it goes further for people who manage systems, records or sensitive data. It sits alongside cybersecurity awareness training. Where that course teaches you to spot phishing and scams, this one teaches you how information should be owned, classified, handled, shared, stored and destroyed.
You will learn the CIA triad, how to identify information assets and their owners, and how to apply a four-level classification scheme (public, internal, confidential, restricted) with clear handling rules for each level. You will work through acceptable use, access control and least privilege, the joiners, movers and leavers process, clean desk and clear screen, secure disposal, backups, third parties and cloud services, and physical security. You will also see how ISO 27001 structures an information security management system, what the Bank of Ghana directive expects of regulated financial institutions, and how an incident should be reported and handled.
Every module uses Ghanaian workplaces: a microfinance branch in Kumasi, a Municipal Assembly in Ho, a distribution company in Tema. You will sort documents into classification levels, make decisions in a branching access-control scenario, and finish with a personal information security action plan. Pass the final assessment at 80% to earn your certificate.
Your instructor
SkillsPillar Faculty
Practitioners and trainers in strategy, public service, enterprise and workplace compliance
SkillsPillar courses are written by practitioners who have trained graduates, managers, public servants and business owners across Ghana. Every course is built around real situations, practical tools and activities that test judgement, not memory.
Learner reviews
No reviews yet. Learners who enrol can leave the first one.
Frequently asked
How do I pay for a course?
Pay securely with MTN MoMo, Telecel Cash, AT Money, Visa or Mastercard through Hubtel. You get access straight after payment.
How long do I have access?
Until you finish. There is no deadline: learn at your own pace for as long as you need. When you complete the course and receive your certificate, the course closes. Your certificate stays in your account for good, and anyone can check it online.
Do I get a certificate?
Yes. Finish every lesson in a course and a certificate is issued automatically. Each one has a QR code and a public link employers can use to check it.
Can I learn on my phone?
Yes. Everything works on a phone, tablet or computer, and your progress follows you between devices.
You might also like
Anti-Bribery & Anti-Corruption
Recognise bribery and corruption at work, know what Ghanaian and foreign law expects, spot the red flags, and know exactly how to refuse, record and report.
From Vision to Action: Translating Organizational Strategy into Functional & Business Unit Strategies
Turn a corporate strategy into business unit and functional strategies, cascaded objectives and KPIs, linked budgets and performance contracts that pull in one direction.
Customer Service & Customer Experience
Give service people remember for the right reasons: read what customers expect, handle complaints and difficult moments well, and keep every channel consistent.