Global

Secure use of generative AI: Data leaks, shadow AI and AI-enabled attacks

A ready-made course you customise for your organisation, with a live session deck and two surveys. You only add the 9 details that are specific to your organisation.

See the live deckSee the full outline
Try the coursePreview the survey
Length
35 min
Lessons
6 lessons
Frequency
At AI tool roll-out and in the annual security refresher
Last reviewed
21 Oct 2026
AI-enabled scams
What would you do?

You get a voice message that sounds like your director, asking you to approve an urgent payment

Try it: this is one of 19 interactive activities in the course.

What's included

Three pieces that work together

Copy once, get everything. Learners prepare on their own, you answer questions live, and the surveys tell you what stuck.

Self-paced course

Short lessons with real workplace scenarios, not walls of text.

  • 6 lessons, about 35 minutes
  • Scenario, sorting activity, accordion, tabs and quizzes

Live session deck

An AhaSlides presentation to run after the course, in person or online.

  • 10 slides
  • Quiz, poll, word cloud, scale slides
  • A closing slide for your contacts

Two surveys

Find out what landed, and whether people use it on the job.

  • Post-course feedback, about 2 minutes
  • 30-day check-in
  • Anonymous by default
  • Results feed your next refresher

Learning objectives

At the end of this course, learners can

Each objective and the lesson that covers it.

IDObjectiveSourceWhere it's covered
TO 201.0Achieve ≥ 80% on the final assessment-Whole course
SO 201.1Recognise what data must never be pasted into an AI tool + your infoOrganisation's data classification and AI rulesWhole course
SO 201.2Explain shadow AI and why unapproved tools are a riskBest practiceWhole course
SO 201.3Spot AI-enabled scams such as cloned voices and convincing messagesBest practiceWhole course
SO 201.4Check AI outputs and links before acting on themBest practiceWhole course
SO 201.5Report concerns and know where to find the approved tools + your infoOrganisation's AI and security policiesWhole course

Your part: what a template can't do for you

  • Your workplace details: fill in the 9 highlighted fields so the course describes your own policies, contacts and locations.
  • Records: record completion in your own LMS or record system.

Course outline

6 lessons, about 35 minutes

Minutes per lesson are an estimate, shared out by page count.

ContentInteractiveVideoYou customise
1

Why AI changes the risk

3 pages

7 min
Before you beginNoteList
The helpful summaryTextImage
What is the risk?ChecklistKey factQuiz
2

What not to paste, and shadow AI

3 pages

6 min
Data traffic lightSorting activityNoteYour infoYour info
Shadow AIAccordion
CheckFlashcardsMatching quiz
3

AI-enabled scams

3 pages

6 min
What has changedTabs
DefencesProcess
Try itScenarioQuiz
4

Grey areas: checking outputs and untrusted content

3 pages

6 min
Trust but verifyAccordion
What would you do?ScenarioYour info
CheckSorting activityMulti-select quiz
5

Report and ask

3 pages

6 min
When to reportTabs
Where to askNoteYour infoYour infoChecklist
Try itScenarioQuiz
6

Your rules and the final assessment

2 pages

4 min
Next stepsProcessYour info
PracticeQuizKey factNoteButtonYour info

Live deck and surveys

10 slides to run live, two surveys to close the loop

Pink slides are interactive. Both surveys are anonymous; pink questions are written for this course.

ContentTitle, agenda, "anything you paste may leave your control
PollWhat have you pasted into an AI tool for work?
Word cloudOne word for AI at work
ContentTraffic light of data
QuizA voice message from your director asks for an urgent payment. Best step? Call back on a known number ✔ · Approve · Reply · Forward
QuizYou pasted client data by mistake. First step? (Report it at once ✔)
ScaleHow sure are you which AI tools are approved?
Content · customiseReport route
Open-ended / Q&AAn AI task you want to do safely
Content · customiseClosing {{APPROVED_TOOLS_LIST}}, {{SURVEY_1_URL}}, {{SURVEY_2_URL}}, {{COURSE_URL}}
Post-course feedback: 11 questions, about 2 min
  1. Overall rating 5 stars
  2. Relevant, realistic, right length, helpful activities agree/disagree grid
  3. What was most useful? multi-select
  4. Confidence before this course, and now 1-5 scale
  5. Which habit will you start? multiple choice
  6. How confident are you spotting an AI-enabled scam? 1-5 scale
  7. Which course should come next? ranking
  8. I know which AI tools I am allowed to use. 1-5 scale
  9. One thing we should change or add open text
  10. Would you recommend this course? NPS
30-day check-in
  1. Have you used what you learned since the course? multiple choice
  2. How confident are you today? Compare with day 1 1-5 scale
  3. Do you know where to find the approved tools list? yes / no / not sure
  4. A moment where the training helped, or where you weren't sure open text
  5. Which topics should the next refresher focus on? ranking

Results show whether people use the training on the job, not just whether they finished it.

Make it yours

9 fields to fill in, and you're ready

Everything else is done. These are the details only your organisation knows; each one is highlighted inside the course.

  • Who staff ask about security questions{{SECURITY_CONTACT}}
  • The route for reporting a security incident or suspected breach, and the time limit that applies{{INCIDENT_REPORT_ROUTE}}
  • Link to your data classification policy{{DATA_CLASSIFICATION_POLICY_LINK}}
  • Link to the list of approved tools and services{{APPROVED_TOOLS_LIST}}
  • Link to the next course in your security awareness path{{NEXT_COURSE_LINK}}
  • Where course completions are recorded{{LMS_OR_RECORD_SYSTEM}}
Show all 9 fields
  • Link to the self-paced course{{COURSE_URL}}
  • Link to the baseline survey{{SURVEY_1_URL}}
  • Link to the post-course and 30-day survey{{SURVEY_2_URL}}

FAQ

Common questions

Can I run secure use of generative AI: Data leaks, shadow AI and AI-enabled attacks training online?

Yes. The course is self-paced and online, and the live deck lets you add a live session in the room or online.

How often is this training needed?

At AI tool roll-out and in the annual security refresher.

Who needs this training?

All staff who use AI tools, with notes for an IT and security variant; run by L&D with the security team.

What records should I keep?

Record completion in your own LMS or record system, so you can show who finished the course and when.

Can I edit the content?

Yes, everything. Change the wording, swap scenarios for ones from your workplace, add your logo, or remove parts that don't apply.

Related templates

Often taught together

All Security awareness templates →
Global

Passwords, passkeys and multi-factor authentication for staff

All employees · Security awareness

30 min
Global

Malware and ransomware: How infections spread and what to do

All employees · Security awareness

30 min
Global

Social engineering, fraud and deepfakes: Phone, payment and impersonation scams

Finance · Security awareness

35 min
Global

Online safety and safeguarding for staff who work with children and young people

Employees · Security awareness

35 min
Last reviewed: 21 October 2026Templates are a starting point, not legal advice.

Ready to run it?

Open the live deck to see how the session runs alongside the course and both surveys.

See the live deck