Cyber Safe at Work
Cybercrime is now the #1 threat to Australian businesses — and the weakest link is almost always a person, not a firewall. In this fast-paced, story-driven session, Jonny walks staff through the 8 real-world ways employees get caught out online, from oversharing and phishing to deepfakes, dodgy wifi, weak passwords and physical attacks in the office. Every point comes with practical habits your team can start using today to protect the business, their families and themselves.
What students walk away with
How oversharing on social, LinkedIn and family photos exposes staff, kids and company data — and the settings to fix it in minutes.
Text, email, DM and 'catfish' scams — how to recognise them and the rule of thumb that stops 95% of attacks.
The Hong Kong $25M deepfake heist, the Ella case, and the simple 'safe word' every team and family should have.
Why one password everywhere is a business risk, and how a password manager plus 2FA solves it overnight.
Guest wifi, public wifi and cheap IOT devices — what to change at work and at home to lock the front door.
HTTPS-only, ad blockers, DuckDuckGo/Brave and VPNs — small habit changes that dramatically reduce exposure.
Why 'update later' is the most expensive click of the year, and free tools like VirusTotal every staff member should know.
USB drops, ID copiers, screen snooping and PIN capture — the on-site risks most cybersecurity training never covers.
Staff leave with a printable 8-point personal cyber checklist and a shared team language for spotting and reporting risk — turning your biggest vulnerability into your strongest line of defence.
The presentation
1. Don't Share Too Much Online
Photos of kids, location tags, public profiles, Alexa and Google Nest voice recordings — Jonny unpacks how everyday sharing becomes an attack surface. By 2030, 2/3 of identity fraud will trace back to parents posting photos of their kids online.
- Set Instagram, Facebook and family accounts to private
- Turn off photo location metadata
- Check photo backgrounds for names, schools and IDs
- Never post company IDs, event invites or house locations
- Ask friends and family not to tag or post your children
2. Don't Get Phished
Text, social media, calls, email and websites — the five phishing surfaces every employee touches every day. Includes real 'catfish' and CEO impersonation stories, plus the safe-word tip for voice-cloning attacks.
3. Use Secure Passwords
A weak password reused across websites is a data-leak away from disaster. Jonny walks staff through the shift to a password manager, a strong master password and 2-factor authentication on every account that matters.
4. Secure Your Work & Home Network
Strong wifi passwords, checking for unknown devices, avoiding cheap IOT products, and why 'Free Airport Wifi' is one of the easiest attacks in the world. Includes the phone setting that turns wifi off automatically when you leave home.
5. Browse Safer
Ad blockers, HTTPS-only mode, privacy-first browsers like DuckDuckGo and Brave, and when to use a VPN — the four settings that reduce daily risk without slowing anyone down.
6. Handle Malware Like a Pro
Why every device should auto-update, how to run a file through VirusTotal before opening it, and why 'trojan' attacks succeed on staff who never think it will happen to them.
7. Physical & On-Site Attacks
USB drops, fake company letters, ID copiers, glass-frame USB chargers and recording keyboards and PINs. The office risks most cybersecurity training completely misses.
- Keep ID lanyards tucked away until you enter the building
- Set laptops to instant screensaver with password
- Cover PINs and keyboards when entering credentials
- Never plug in an unknown USB — no matter where you found it
8. What If…?
The final section is a rapid-fire response plan: what to do the moment you suspect a breach, who to call, what to isolate, and how to protect the business, your team and your family in the first 60 minutes.
Format & Delivery
Best delivered as a 60–90 minute keynote or interactive workshop for staff, leadership teams, boards or conferences. Suitable for all technical levels — no jargon, no fear-mongering, just practical habits that stick.
Curriculum alignment
This presentation is tailored to the audience depending on age & outcomes and follows the Australian curriculum according to Educational Analysis and Consulting.
- • Corporate staff training, PD days and all-hands sessions
- • Leadership teams, boards and executive briefings
- • Conferences, industry associations and community events
- • School staff (as a teacher PD version)
- • An 8-point personal cyber safety checklist
- • Shared team language for spotting and reporting risk
- • Practical settings and tools to implement the same week
- • Confidence to protect the business, their families and themselves
What educators say
Your session was absolutely amazing and we can't thank you enough. The way you engaged over 6,000 people was impressive. We learnt a lot and have numerous people asking for the recordings. Will get you back next year!
Enjoyed your presentation for Okta's security awareness month Jonny, awesome work. Would recommend you to any team wanting to up skill their employees on new threats & common hacks. Great work again.
Engaging & Powerful. A mix of humour, facts and live demos. I have already booked you for next year.
As Featured On
Book Cyber Safe at Work
Terms 1–4 filling fast. Get pricing, availability and a proposal for your school within 3 business hours.