Information Security
Classify and handle information correctly, control who gets access, protect paper, devices and backups, and report security incidents quickly under your organisation's policy.
What you'll learn
- Explain confidentiality, integrity and availability and apply them to the information you handle every day
- Identify the information assets in your area, who owns them and who looks after them
- Classify information as public, internal, confidential or restricted and follow the handling rules for each level
- Apply acceptable use, access control and least privilege, including the joiners, movers and leavers process
- Protect information on paper and devices through clean desk, clear screen, physical security and secure disposal
- Check that backups, third parties and cloud services meet the organisation's security requirements
- Describe how ISO 27001 and the Bank of Ghana Cyber and Information Security Directive shape an organisation's approach
- Recognise an information security incident and report it quickly through the right channel
Who this course is for
- All staff in private companies, banks, NGOs and public institutions who handle information of any kind
- Public servants in MDAs and MMDAs who keep records, run registries or manage revenue, payroll and case files
- System administrators, IT officers, records officers and data owners who grant access or look after sensitive information
- Managers who approve access, sign contracts with suppliers or lead teams that handle customer and staff data
- Staff of banks, savings and loans companies and other institutions regulated by the Bank of Ghana
Course content
6 sections · 26 lessons · 3h 59mStart here 3 lessons · 14 min
Module 1: What information security protects 5 lessons · 45 min
Module 2: Classifying and handling information 5 lessons · 47 min
Module 3: Access, people and partners 5 lessons · 50 min
Module 4: Physical security, backups and incidents 5 lessons · 47 min
Final module: Putting it to work 3 lessons · 36 min
Before you start
- No technical or IT background is needed
- A phone, tablet or computer with internet access
- A copy of your organisation's information security, acceptable use or data protection policy is helpful but not required
About this course
Most information security failures in Ghanaian organisations do not need a hacker. A staff list is left on the photocopier. A former officer's login still works three months after she resigned. A laptop holding every customer's loan file is sold with the old office furniture. The only backup of the revenue database sits on a hard drive in the same room as the server, and the room floods.
This course is about how an organisation manages its information: the policies, the habits and the decisions that keep information confidential, accurate and available. It is written for all staff in companies and public institutions, and it goes further for people who manage systems, records or sensitive data. It sits alongside cybersecurity awareness training. Where that course teaches you to spot phishing and scams, this one teaches you how information should be owned, classified, handled, shared, stored and destroyed.
You will learn the CIA triad, how to identify information assets and their owners, and how to apply a four-level classification scheme (public, internal, confidential, restricted) with clear handling rules for each level. You will work through acceptable use, access control and least privilege, the joiners, movers and leavers process, clean desk and clear screen, secure disposal, backups, third parties and cloud services, and physical security. You will also see how ISO 27001 structures an information security management system, what the Bank of Ghana directive expects of regulated financial institutions, and how an incident should be reported and handled.
Every module uses Ghanaian workplaces: a microfinance branch in Kumasi, a Municipal Assembly in Ho, a distribution company in Tema. You will sort documents into classification levels, make decisions in a branching access-control scenario, and finish with a personal information security action plan. Pass the final assessment at 80% to earn your certificate.
Your instructor
SkillsPillar Faculty
Practitioners and trainers in strategy, public service, enterprise and workplace compliance
SkillsPillar courses are written by practitioners who have trained graduates, managers, public servants and business owners across Ghana. Every course is built around real situations, practical tools and activities that test judgement, not memory.
Learner reviews
No reviews yet. Learners who enrol can leave the first one.
Frequently asked
How do I pay for a course?
Pay securely with MTN MoMo, Telecel Cash, AT Money, Visa or Mastercard through Hubtel. You get access straight after payment.
How long do I have access?
For life. Once you enrol, the course stays in your account and you can learn at your own pace, including any updates we make.
Do I get a certificate?
Yes. Finish every lesson in a course and a certificate is issued automatically. Each one has a QR code and a public link employers can use to check it.
Can I learn on my phone?
Yes. Everything works on a phone, tablet or computer, and your progress follows you between devices.
You might also like
Data Protection & Privacy
Handle personal data lawfully under Ghana's Data Protection Act, 2012 (Act 843): collect less, keep it safe, respect people's rights and act fast when a breach happens.
Workplace Harassment & Respectful Workplace
Recognise harassment, step in safely as a bystander, respond well if it happens to you, and handle complaints fairly as a manager in any Ghanaian workplace.
Business Continuity & Crisis Management
Know what to do when power, water, fire, a cyber attack or a supplier failure stops work, and help your organisation keep serving people and recover fast.