Global

Zero trust, cloud and vulnerability management for IT teams

A ready-made course you customise for your organisation, with a live session deck and two surveys. You only add the 8 details that are specific to your organisation.

See the live deckSee the full outline
Try the coursePreview the survey
Length
45 min
Lessons
6 lessons
Frequency
At IT onboarding and when a cloud or access-model change starts
Last reviewed
21 Oct 2026
Cloud: shared responsibility
What would you do?

You find a storage bucket set to public that holds internal files

Try it: this is one of 20 interactive activities in the course.

What's included

Three pieces that work together

Copy once, get everything. Learners prepare on their own, you answer questions live, and the surveys tell you what stuck.

Self-paced course

Short lessons with real workplace scenarios, not walls of text.

  • 6 lessons, about 45 minutes
  • Tabs, process, sorting activity, scenario and quizzes

Live session deck

An AhaSlides presentation to run after the course, in person or online.

  • 10 slides
  • Quiz, poll, scale, word cloud slides
  • A closing slide for your contacts

Two surveys

Find out what landed, and whether people use it on the job.

  • Post-course feedback, about 2 minutes
  • 30-day check-in
  • Anonymous by default
  • Results feed your next refresher

Learning objectives

At the end of this course, learners can

Each objective and the lesson that covers it.

IDObjectiveSourceWhere it's covered
TO 200.0Achieve ≥ 80% on the final assessment-Whole course
SO 200.1Explain zero trust in plain terms and where least privilege fitsZero trust guidance (see verification list)Whole course
SO 200.2Apply identity-first thinking to access requests and reviewsBest practiceWhole course
SO 200.3Describe shared responsibility in cloud services and common misconfigurationsCloud provider shared-responsibility documentation (see verification list)Whole course
SO 200.4Run a simple vulnerability management cycle: find, rate, fix, checkBest practiceWhole course
SO 200.5Make patching and exception decisions with the risk owner + your infoOrganisation's vulnerability policyWhole course

Your part: what a template can't do for you

  • Your workplace details: fill in the 8 highlighted fields so the course describes your own policies, contacts and locations.
  • Records: record completion in your own LMS or record system.

Course outline

6 lessons, about 45 minutes

Minutes per lesson are an estimate, shared out by page count.

ContentInteractiveVideoYou customise
1

Why trust nothing by default

3 pages

8 min
Before you beginNoteList
The shared admin accountTextImage
What went wrong?ChecklistKey factQuiz
2

Zero trust and least privilege

3 pages

8 min
Core ideasTabs
Access reviewsProcess
CheckSorting activityMatching quiz
3

Cloud: shared responsibility

3 pages

8 min
Who does whatAccordion
Common misconfigurationsTabs
Try itScenarioYour infoQuiz
4

Vulnerability management

3 pages

8 min
The cycleProcess
RatingAccordion
CheckSorting activityQuiz
5

Grey areas: patching, legacy and exceptions

3 pages

8 min
When you cannot patchTabs
What would you do?Scenario
CheckSorting activityMulti-select quiz
6

Your practices and the final assessment

2 pages

5 min
Next stepsProcessYour infoYour info
PracticeQuizKey factNoteButtonYour info

Live deck and surveys

10 slides to run live, two surveys to close the loop

Pink slides are interactive. Both surveys are anonymous; pink questions are written for this course.

ContentTitle, agenda, "trust nothing by default
PollHow often are privileged accounts reviewed?
ContentZero trust in five words
QuizLeast privilege means… Only the access needed ✔ · Admin for all · No access · Shared accounts
QuizA critical patch would stop production for four hours. What first? (Assess risk, plan a window, add temporary controls ✔)
ScaleHow well do you know your cloud settings?
Word cloudA misconfiguration you have seen
ContentThe vulnerability cycle
Open-ended / Q&AA patch or exception you are unsure about
Content · customiseClosing {{SECURITY_CONTACT}}, {{SURVEY_1_URL}}, {{SURVEY_2_URL}}, {{COURSE_URL}}
Post-course feedback: 11 questions, about 2 min
  1. Overall rating 5 stars
  2. Relevant, realistic, right length, helpful activities agree/disagree grid
  3. What was most useful? multi-select
  4. Confidence before this course, and now 1-5 scale
  5. Which practice will you start? multiple choice
  6. How confident are you making a patch exception decision? 1-5 scale
  7. Which course should come next? ranking
  8. I can raise a security concern about a system I own. 1-5 scale
  9. One thing we should change or add open text
  10. Would you recommend this course? NPS
30-day check-in
  1. Have you used what you learned since the course? multiple choice
  2. How confident are you today? Compare with day 1 1-5 scale
  3. Do you know where to find the access review checklist? yes / no / not sure
  4. A moment where the training helped, or where you weren't sure open text
  5. Which topics should the next refresher focus on? ranking

Results show whether people use the training on the job, not just whether they finished it.

Make it yours

8 fields to fill in, and you're ready

Everything else is done. These are the details only your organisation knows; each one is highlighted inside the course.

  • Who staff ask about security questions{{SECURITY_CONTACT}}
  • Link to your information security policy{{SECURITY_POLICY_LINK}}
  • The route for reporting a security incident or suspected breach, and the time limit that applies{{INCIDENT_REPORT_ROUTE}}
  • Link to the next course in your security awareness path{{NEXT_COURSE_LINK}}
  • Where course completions are recorded{{LMS_OR_RECORD_SYSTEM}}
  • Link to the self-paced course{{COURSE_URL}}
Show all 8 fields
  • Link to the baseline survey{{SURVEY_1_URL}}
  • Link to the post-course and 30-day survey{{SURVEY_2_URL}}

FAQ

Common questions

Can I run zero trust, cloud and vulnerability management for IT teams training online?

Yes. The course is self-paced and online, and the live deck lets you add a live session in the room or online.

How often is this training needed?

At IT onboarding and when a cloud or access-model change starts.

Who needs this training?

IT and security operations staff; run by L&D with the head of IT or security.

What records should I keep?

Record completion in your own LMS or record system, so you can show who finished the course and when.

Can I edit the content?

Yes, everything. Change the wording, swap scenarios for ones from your workplace, add your logo, or remove parts that don't apply.

Related templates

Often taught together

All Technical security templates →
Global

Secure software development: OWASP top 10 and secure coding for developers

Developers and DevOps engineers; run by L&D · Technical security

50 min
Last reviewed: 21 October 2026Templates are a starting point, not legal advice.

Ready to run it?

Open the live deck to see how the session runs alongside the course and both surveys.

See the live deck