112-12
Coming Soon
Expected availability announced soon
This course is in active development. Preview the scope below and create a free account to be notified the moment it goes live.
ECCouncil CSCU
The CSCU exam teaches essential security concepts, including threat awareness, password best practices, network and email protection, and privacy controls, enabling users to safeguard personal and organizational data.
120
Minutes
50
Questions
70/100
Passing Score
$250
Exam Cost
Who Should Take This
It is ideal for office staff, remote workers, and any non‑technical professional who handles digital communication daily. Learners have little to no cybersecurity background but want to reduce risk and comply with basic security policies. The certification validates their ability to apply practical safety measures.
What's Covered
1
Security Fundamentals and Threat Landscape
2
Password and Authentication Security
3
Internet and Network Security
4
Email and Communication Security
5
Social Media and Online Privacy
6
Mobile Device and IoT Security
7
Data Protection and Cloud Security
8
Endpoint Security and Malware Prevention
9
Privacy, Legal, and Organizational Security
What's Included in AccelaStudy® AI
Adaptive Knowledge Graph
Practice Questions
Lesson Modules
Console Simulator Labs
Exam Tips & Strategy
20 Activity Formats
Course Outline
61 learning goals
1
Security Fundamentals and Threat Landscape
2 topics
Information security basics
- Identify core information security concepts including confidentiality, integrity, and availability and explain their relevance to personal data protection.
- Describe common cybersecurity threats including malware, phishing, ransomware, identity theft, and social engineering and their potential impact on individuals.
- Explain the difference between viruses, worms, trojans, spyware, adware, and rootkits and recognize symptoms of infection on personal devices.
- Identify types of cybercrime including financial fraud, cyberstalking, intellectual property theft, and unauthorized access and describe legal consequences.
Social engineering awareness
- Identify social engineering techniques including pretexting, baiting, tailgating, quid pro quo, and watering hole attacks targeting end users.
- Recognize indicators of phishing emails including suspicious sender addresses, urgent language, mismatched URLs, and unexpected attachments.
- Apply anti-phishing practices by verifying sender identity through secondary channels, hovering over links before clicking, and reporting suspicious messages.
- Analyze a suspicious communication scenario to determine whether it is a legitimate message or a social engineering attempt and select the appropriate response.
2
Password and Authentication Security
2 topics
Password management
- Describe characteristics of strong passwords including length, complexity, uniqueness, and avoidance of dictionary words and personal information.
- Apply password management best practices using password managers, unique passwords per account, and regular password rotation schedules.
- Configure multi-factor authentication on email, banking, and social media accounts using authenticator apps, SMS codes, or hardware security keys.
- Evaluate the security strength of different authentication methods and recommend appropriate MFA configurations for various account sensitivity levels.
Account security and recovery
- Identify signs of compromised online accounts including unauthorized login alerts, password reset emails, and unfamiliar account activity.
- Apply account recovery procedures including password resets, contacting service providers, and enabling additional security measures after a breach.
- Evaluate the overall security posture of personal accounts by assessing password strength, MFA coverage, recovery options, and linked app permissions.
3
Internet and Network Security
2 topics
Safe web browsing
- Describe secure browsing practices including verifying HTTPS connections, avoiding suspicious downloads, and recognizing fake websites and URL manipulation.
- Configure browser security settings including pop-up blockers, cookie management, do-not-track preferences, and security extension installation.
- Identify indicators of malicious websites including invalid SSL certificates, suspicious URL patterns, drive-by downloads, and malvertising techniques.
- Analyze a web browsing scenario to determine potential security risks and recommend appropriate browser configurations and protective measures.
Network and Wi-Fi security
- Describe risks of using public Wi-Fi networks including man-in-the-middle attacks, evil twin access points, and unencrypted data transmission.
- Apply VPN technology to protect internet traffic on public networks and explain how VPN encryption prevents eavesdropping on sensitive communications.
- Configure home router security settings including WPA3 encryption, SSID management, guest network isolation, and firmware update procedures.
- Configure home network firewall settings, disable remote management features, and change default administrator credentials to prevent unauthorized access.
4
Email and Communication Security
2 topics
Email security
- Identify email threats including spear phishing, business email compromise, malicious attachments, email spoofing, and spam-based malware distribution.
- Apply email security practices including verifying sender identity, scanning attachments, using email encryption, and reporting suspicious emails.
- Configure email client security features including spam filtering, attachment blocking rules, and automatic image loading controls to reduce threat exposure.
Instant messaging and collaboration security
- Describe security risks of instant messaging and collaboration platforms including file sharing vulnerabilities, screen sharing risks, and unauthorized meeting access.
- Apply secure collaboration practices including using end-to-end encrypted messaging, verifying meeting invitations, and managing file sharing permissions.
5
Social Media and Online Privacy
2 topics
Social media security
- Describe privacy risks on social media platforms including data harvesting, location tracking, oversharing personal information, and fake profile scams.
- Configure social media privacy settings to limit profile visibility, control data sharing with third-party applications, and manage follower access.
- Analyze social media account activity to identify unauthorized access, suspicious third-party app permissions, and potential data exposure risks.
Online identity protection
- Identify identity theft techniques including account takeover, synthetic identity creation, dark web data sales, and credential stuffing attacks.
- Apply identity protection measures including credit monitoring, fraud alerts, identity theft insurance, and personal data minimization strategies.
- Evaluate personal online exposure by auditing digital footprint, reviewing data broker records, and assessing risk from publicly available information.
6
Mobile Device and IoT Security
2 topics
Mobile device protection
- Describe mobile device security threats including malicious apps, jailbreaking risks, Bluetooth vulnerabilities, and lost or stolen device scenarios.
- Apply mobile security measures including screen lock configuration, app permission management, OS updates, and remote wipe capability setup.
- Evaluate mobile application permissions to identify excessive data access requests and determine which permissions are necessary for legitimate functionality.
IoT device security
- Identify security risks associated with IoT devices including smart home assistants, cameras, wearables, and medical devices and describe default credential vulnerabilities.
- Apply IoT security practices including changing default passwords, network segmentation, disabling unnecessary features, and keeping firmware updated.
- Analyze a smart home network to identify potential IoT attack surfaces and recommend segmentation and monitoring strategies to reduce exposure.
7
Data Protection and Cloud Security
2 topics
Data backup and protection
- Describe data backup strategies including local backups, cloud backups, the 3-2-1 rule, and backup verification and restoration testing procedures.
- Apply data protection techniques including file encryption, secure file deletion, disk encryption, and encrypted removable storage media usage.
- Configure automated backup schedules for personal documents and critical data using cloud storage services and local backup solutions.
Cloud storage and online transactions
- Identify security considerations for cloud storage services including access controls, sharing permissions, synchronization risks, and data sovereignty.
- Apply secure online transaction practices including verifying merchant legitimacy, using secure payment methods, and monitoring statements for fraud.
- Analyze a data breach notification to determine appropriate protective actions including password changes, credit monitoring, and identity theft reporting.
8
Endpoint Security and Malware Prevention
2 topics
Antivirus and endpoint protection
- Describe antivirus software functionality including real-time scanning, signature-based detection, heuristic analysis, and quarantine operations.
- Install and configure antivirus software with automatic updates, scheduled scans, and real-time protection enabled on personal computing devices.
- Apply operating system hardening techniques including enabling automatic updates, configuring built-in firewalls, and disabling unnecessary services.
Safe computing habits
- Describe safe software installation practices including downloading from official sources, verifying digital signatures, and avoiding pirated software.
- Apply safe removable media practices including scanning USB drives before use, disabling autorun, and using encrypted storage for sensitive files.
- Evaluate the risk level of downloading and installing software from various sources and recommend verification steps to ensure software authenticity.
9
Privacy, Legal, and Organizational Security
3 topics
Privacy regulations and awareness
- Identify key privacy regulations including GDPR, CCPA, and COPPA and describe individual rights regarding personal data access, correction, and deletion.
- Apply privacy protection measures including limiting data sharing, reviewing privacy policies, exercising data subject rights, and using privacy-focused tools.
- Evaluate a website privacy policy to determine data collection practices, third-party sharing, and compliance with applicable privacy regulations.
Workplace security practices
- Describe workplace security policies including acceptable use, clean desk practices, screen locking, visitor management, and secure document disposal.
- Apply workplace security practices including reporting incidents, following data classification guidelines, and adhering to remote work security policies.
- Analyze a workplace security scenario to identify policy violations, assess potential data exposure, and recommend corrective actions.
Incident recognition and reporting
- Identify signs of a security incident including unexpected pop-ups, performance degradation, unauthorized account activity, and ransomware file encryption.
- Apply initial incident response actions including disconnecting from the network, documenting symptoms, preserving evidence, and contacting technical support.
- Evaluate the severity of a personal security incident to prioritize response actions and determine whether professional assistance or law enforcement is required.
Scope
Included Topics
- All modules in the EC-Council Certified Secure Computer User (CSCU) program covering personal and organizational cybersecurity awareness for end users.
- Foundational security concepts including password hygiene, email security, web browsing safety, social media privacy, mobile device security, cloud storage safety, and data backup fundamentals.
- Threat awareness including phishing, social engineering, malware, ransomware, identity theft, online fraud, and cyberbullying prevention.
- Practical security measures including antivirus usage, firewall basics, Wi-Fi security, VPN usage, two-factor authentication, and secure online transactions.
- Data protection and privacy including GDPR awareness, personal data handling, secure file deletion, encryption basics, and safe IoT device configuration.
Not Covered
- Enterprise network security architecture, IDS/IPS deployment, and SOC operations covered by CND and higher certifications.
- Penetration testing methodologies, exploit development, and ethical hacking techniques covered by CEH.
- Advanced cryptographic algorithms, PKI infrastructure design, and certificate authority management.
- Digital forensics procedures, malware reverse engineering, and incident response team coordination.
- Regulatory compliance program management, risk assessment frameworks, and security audit methodologies.
Official Exam Page
Learn more at EC-Council
112-12 is coming soon
Adaptive learning that maps your knowledge and closes your gaps.
Create Free Account to Be Notified