Rocheston logoROCHESTON
rocheston.com / courses / rccs
RCCS · CYBERSECURITY AWARENESS FOR EVERYONE

Your human firewall starts here.

Rocheston Cybersecurity Specialist (RCCS)

Become the human firewall in 2 days. Spot phishing, stop social engineering, protect passwords, use MFA, secure your devices, handle sensitive data, avoid public Wi-Fi traps, and report incidents correctly — no technical background required.

2-Day Awareness Program No Technical Background Needed Phishing · Passwords · MFA · Social Engineering Incident Reporting Basics For Employees, Students, Families & Teams
2DAYS 24AWARENESS MODULES 12REAL-LIFE SCENARIOS 50RCT-99 QUESTIONS 70%PASSING SCORE 0TECH BACKGROUND NEEDED

// after rccs, you will be able to

Twelve everyday-safety capabilities.

Spot phishing — fake emails, websites, suspicious links, malicious attachments
Use strong passwords — unique passwords and password managers, correctly
Turn on MFA — and use multifactor authentication everywhere it matters
See through social engineering — impersonation, urgency tricks, manipulation
Protect sensitive data — personal, customer, student, patient, company
Use public Wi-Fi safely — and recognize fake hotspots
Secure your devices — laptops, phones, browsers, everyday apps
Recognize malware signs — ransomware, credential theft, BEC, scam behavior
Spot AI-powered scams — polished phishing, deepfake voices, fake chatbots
Report suspicious activity — emails, messages, calls, and system behavior, properly
Respond without panic — basic incident steps that don't make things worse
Pass the RCCS exam — RCT-99, scenario-based, built for real life

// the four cyber habits every user must master

Four habits. Most attacks stopped.

Recognize & Report Phishing

Spot suspicious emails, texts, calls, QR codes, and login pages — and report them.

Use Strong Passwords

Long, unique passwords, managed safely with a password manager.

Turn On MFA

Protect important accounts with multifactor authentication.

Update Software

Keep devices, apps, and browsers patched against known risks.

Aligned with the four simple actions in CISA's Secure Our World campaign.

// real-life cyber scenarios you will practice

The moments that matter.

RCCS is built around real decisions in real moments — the exact situations attackers count on:

Suspicious "IT Support" Email

"Reset your password immediately." Inspect sender, link, tone, and the login page first.

Fake Invoice Attachment

An unexpected invoice file — spot the warning signs, report it safely.

CEO Gift Card Scam

A fake executive needs gift cards urgently. Authority + urgency = classic con.

MFA Push Bombing

Repeated login approval requests — when to deny, report, and reset.

Public Wi-Fi Trap

Airport café network — what not to access, when to use a VPN, fake hotspots.

Lost Phone or Laptop

A device with company or personal data goes missing — the first moves.

Suspicious USB Drive

Found in the parking lot. Why plugging it in is the trap.

Social Media Oversharing

How posts, job titles, and travel photos fuel targeted scams.

Fake Bank or Delivery Text

A smishing message with a link — how to verify safely.

Coworker Account Compromise

A real colleague's email sends a strange request — verify on a second channel.

Data Sent to the Wrong Person

Confidential data, wrong recipient — what to do right now.

AI-Generated Phishing

Polished, personalized, grammatically perfect — and still a scam.

Suspicious email playbook Clicked-a-bad-link playbook Credentials-on-fake-page playbook Leaked password playbook Lost device playbook Unexpected MFA request playbook Urgent data request playbook Wrong-recipient playbook Suspected malware playbook Suspicious cloud activity playbook

// the transformation

From easy target
to human firewall.

BEFORE RCCS

"It won't happen to me…"

  • I click links without checking them carefully
  • I reuse passwords across accounts
  • I don't know how to report suspicious messages
  • Phishing, smishing, vishing — not sure how they work
  • I use public Wi-Fi without thinking about it
  • I assume cybersecurity is the IT department's job
AFTER RCCS

"Nice try. Reported."

  • I recognize common scams and suspicious messages
  • I use strong passwords and MFA
  • I report incidents quickly and correctly
  • I see social engineering tactics coming
  • I protect sensitive personal and company data
  • I understand my role in protecting the organization
62%

of breaches involve the human element — busy, distracted, helpful people under pressure. That's exactly what RCCS trains. Source: Verizon Data Breach Investigations Report

2

days from "I click everything" to a trained human firewall — pause before clicking, verify before trusting, report before hiding mistakes.

// hands-on awareness labs

Ten labs. Zero jargon.

Phishing Email Investigation

Sender address, link destination, urgency language, attachments, spoofing signs.

Fake Login Page Detection

Compare real and fake login pages; spot suspicious URLs.

Password Manager Setup

Strong unique passwords, and how managers end reuse.

MFA Setup & Recovery Codes

Enable MFA and store recovery codes safely.

Social Engineering Role-Play

Handle a fake call from "IT support," "HR," or a vendor.

Safe Browsing Decisions

Risky downloads, fake update prompts, suspicious pop-ups.

Public Wi-Fi Safety Exercise

Safe behavior on public networks; spotting fake hotspots.

Data Classification Exercise

Public, internal, confidential, or highly sensitive?

Incident Reporting Drill

Report suspicious emails, lost devices, accidental exposure.

Final Cyber Hygiene Challenge

One realistic scenario: phishing + password risk + social engineering + reporting.

// your 2-day journey

Two days. New habits.

DAY 1

Recognize Threats & Protect Yourself

How cybercriminals target people · phishing, smishing, vishing & QR scams · social engineering & impersonation · strong passwords & password managers · MFA · safe browsing & public Wi-Fi · malware & ransomware signs · device and mobile safety.

DAY 2

Respond, Report & Build Safe Habits

Reporting suspicious emails & messages · handling suspected account compromise · lost or stolen devices · protecting sensitive data · cloud & file-sharing safety · workplace security policies · scenario exercises · exam preparation.

// two paths, one course

For individuals. For organizations.

RCCS for Individuals

Students, parents, job seekers, remote workers, freelancers, small business owners, seniors — anyone who uses email, banking, social media, or cloud apps.

Personal email Bank accounts Mobile devices Social media accounts Online shopping Personal identity Photos & documents Family members

RCCS for Organizations

Employees, managers, HR, finance, support, sales, healthcare, education, government, contractors, and hybrid teams.

Phishing awareness Password hygiene Incident reporting Data handling Remote work security Compliance readiness Security culture Employee accountability

// department-specific awareness

Every team has its own scams.

Finance Teams

Invoice fraud, wire transfer scams, CEO fraud, payment redirection, payroll scams.

HR Teams

Resume attachments, personal data handling, employee records, onboarding scams.

Executives

Whaling, impersonation, travel risk, board communications, sensitive decisions.

Sales & Customer Support

Customer data handling, CRM security, impersonation, suspicious attachments.

IT Help Desk

Identity verification, password-reset abuse, MFA fatigue, social engineering calls.

Healthcare · Education · Government

Sensitive records, privacy obligations, phishing, account misuse, reporting workflow.

// for teams: measure awareness, not just attendance

Human-risk metrics that move.

Course completion rate Phishing simulation click rate Phishing report rate Time to report suspicious activity Password manager adoption MFA adoption Repeat-risk users Policy acknowledgement Department-level awareness gaps

Consistent with NIST SP 800-50 Rev. 1 guidance: awareness as a managed, measured learning program — not one-time training.

// what you will leave with

Checklists you'll actually use.

Personal cyber safety checklist
Phishing red-flag checklist
Password & MFA checklist
Safe browsing checklist
Public Wi-Fi safety checklist
Incident reporting cheat sheet
Device security checklist
Data-handling checklist
Social engineering response guide
RCCS certificate after passing
Teams: incident reporting workflow + awareness poster pack
Teams: manager briefing template + completion records

// the 2026 problem

Scams don't have typos anymore.

AI has changed the game: AI-written phishing, deepfake voice calls, fake video messages, fake job offers, AI chatbot impostors, synthetic identities — and "Shadow AI," where well-meaning employees paste sensitive data into public AI tools. RCCS teaches you to verify unusual requests even when they look polished, sound like a real person, or appear to come from a trusted source.

AI-written phishing emails Deepfake voice calls Fake video messages Fake job offers Fake support chatbots AI-generated invoices Synthetic identity scams Shadow AI data leakage

// certification exam details

The RCCS exam, in full.

Exam title
Rocheston Cybersecurity Specialist
Exam code
RCT-99
Questions
50
Format
Scenario-Based MCQ
Duration
2 Hours
Passing score
70%
Delivery
Online · Ramsys Proctoring
Prerequisites
None — built for everyone

Sample question: You receive an email from your bank asking you to confirm your password through a link. What should you do first?

  • A. Click the link quickly
  • B. Reply with your password
  • C. Visit the bank website directly or call the official number ✓
  • D. Forward it to coworkers

Never authenticate through a link you didn't request — always verify through a channel you control.

// what's included

Everything in the program.

2-day awareness training
24 awareness modules
Cyberclass access
Scenario-based exercises
Phishing recognition practice
Social engineering role-play
All checklists & reporting guides
RCT-99 exam preparation
Certificate after passing · group options for teams

// delivery options

Three formats. Same scenarios.

Live Instructor-Led

A 2-day live online or classroom program with guided scenario exercises.

Blended

Instructor-led sessions plus Cyberclass online modules.

Self-Paced Cyberclass

Videos, exercises, downloadable resources, and discussion support.

// rccs or rcce? pick your path

Awareness for everyone. Careers for builders.

Start with RCCS if you want cyber safety for everyday work and life. Choose RCCE Level 1 if you want to build a technical cybersecurity career.

ProgramBest forFocus
RCCSEveryone — employees, students, non-technical usersAwareness: phishing, passwords, MFA, social engineering, reporting
RCCE Level 1IT professionals and career changersEthical hacking, cyber defense, Rose OS labs, technical foundations
RSOCSOC-career learnersSIEM, alert triage, incident detection, SOC workflows
CCOCompliance and GRC professionalsFrameworks, risk, audit evidence, compliance reporting

// frequently asked questions

Doubts? Cleared.

Is RCCS technical?

No. RCCS is designed for everyday users and employees with no technical background.

Who should take RCCS?

Employees, students, families, managers, remote workers, small business owners — anyone who uses email, devices, cloud apps, social media, or online banking.

Does RCCS teach hacking?

No. RCCS teaches awareness, prevention, safe behavior, and incident reporting. For ethical hacking, consider RCCE Level 1.

What topics are covered?

Phishing, passwords, MFA, social engineering, malware awareness, safe browsing, public Wi-Fi, device security, sensitive data handling, AI scam awareness, and incident reporting.

Is this suitable for companies?

Yes — RCCS is ideal for employee awareness training, supports security culture, and gives teams measurable human-risk metrics.

How does the exam work?

RCT-99: 50 scenario-based MCQs, 2 hours, 70% to pass — proctored online via Rocheston Ramsys.

Is the exam included in the training price?

Contact us for current pricing and packaging — our team will confirm exactly what's included for your region and format.

What should I take after RCCS?

RCCE Level 1 for technical cybersecurity, RSOC for SOC analyst skills, CCO for compliance, or RCCI for cyber forensics.

// the 24 awareness modules

Every module, in order. All awareness, no jargon.

Cybersecurity Awareness Fundamentals
Why Humans Are Targeted
Common Cyber Threats for Everyday Users
Phishing Email Recognition
Smishing, Vishing and QR Code Scams
Social Engineering and Impersonation
Password Hygiene and Password Managers
Multifactor Authentication
Safe Web Browsing
Public Wi-Fi and VPN Basics
Email Attachment and Link Safety
Malware and Ransomware Awareness
Device Security for Laptops and Phones
Software Updates and Patch Awareness
Data Privacy and Sensitive Information Handling
Cloud Storage and File-Sharing Safety
Social Media Safety and Oversharing Risks
Remote Work and Home Network Safety
AI, Deepfakes and Modern Scam Awareness
Insider Risk and Workplace Security Behavior
Incident Reporting: What to Report and When
Basic Incident Response for Non-Technical Users
Security Policies, Acceptable Use and Compliance Basics
Final Scenario Review and RCCS Exam Preparation

Full details: download the RCCS syllabus (PDF).

// Haja Mo RCCS audio message

Hear from Haja Mo: Why RCCS turns everyday users into human firewalls.

A founder-led message for employees, students, families, and teams ready to spot phishing, protect passwords, use MFA, stop social engineering, avoid AI-powered scams, and report incidents with confidence.

Human Firewall 2-Day Program Phishing Defense MFA + Passwords AI Scam Awareness RCT-99
▶ Listen to Haja Mo

“Pause before clicking. Verify before trusting. Report with confidence.

Read the transcript

Hello my friend, I am Haja Mo, creator of the Rocheston cybersecurity certification ecosystem.

Welcome to RCCS, the Rocheston Cybersecurity Specialist program.

Let me tell you something very simple and very important. Cybersecurity is not only for engineers, hackers, analysts, or IT teams. Cybersecurity is for every person who uses email, a phone, a laptop, a bank account, a cloud app, social media, or a company system. Today, one careless click can create a serious problem. But one trained person can stop an attack before it begins.

That is why RCCS exists.

RCCS is the human firewall program. It is a two-day, practical cybersecurity awareness certification built for everyday users, employees, students, families, managers, remote workers, and teams. No technical background is required. You do not need to know programming. You do not need to be a network engineer. You just need to learn how modern scams work, how attackers pressure people, and how to respond with confidence.

My friend, attackers do not only attack computers. They attack people. They send phishing emails. They send text-message scams. They create fake QR codes. They pretend to be banks, bosses, vendors, schools, delivery companies, IT support, and even family members. They use urgency, fear, curiosity, authority, and trust. RCCS teaches you how to pause, verify, and report before damage happens.

In this program, you learn the habits employers want every team member to have. Spot phishing. Protect passwords. Use multifactor authentication. Recognize social engineering. Avoid public Wi-Fi traps. Secure your phone and laptop. Handle sensitive data carefully. Use cloud storage and file sharing safely. Watch for malware warning signs. Recognize AI-powered scams, deepfake voices, fake video messages, and polished phishing that no longer looks full of mistakes.

This is why RCCS is so powerful. It does not drown you in jargon. It gives you real-life scenarios. You practice what to do when a suspicious email arrives. You learn what to do when someone asks for a password reset. You learn how to respond to a fake invoice, a fake login page, a malicious attachment, a strange phone call, a lost device, or a message that looks like it came from your boss.

For organizations, RCCS helps build security culture. A strong company is not protected only by firewalls and software. It is protected by people who know when something feels wrong, people who report quickly, and people who do not hide mistakes. Employers value these habits because they reduce risk every single day.

Inside RCCS, you go through 24 awareness modules and 12 real-life scenarios. You receive checklists you can actually use: phishing red flags, password and MFA safety, public Wi-Fi safety, device security, data handling, social engineering response, and incident reporting. These are practical tools you can take back to work, school, home, and daily life.

And let me be clear: RCCS does not teach hacking. It teaches awareness, prevention, safe behavior, and reporting. This is ethical, practical, and built for everyone. The goal is not to make you afraid of technology. The goal is to make you confident.

The RCCS exam, RCT-99, is scenario-based. It has 50 questions, two hours, and a 70 percent passing score, proctored through Rocheston Ramsys. That means the exam checks whether you can think through real situations, not just memorize definitions. Rocheston Cyberclass supports the learning experience, and the Rocheston ecosystem gives you a clear path if you later want to move into RCCE, RSOC, CCO, or RCCI.

When you complete RCCS, you are not just saying, “I attended awareness training.” You can say, “I know how to spot phishing. I use strong passwords. I understand MFA. I can recognize social engineering. I know how to protect sensitive data. I know when and how to report suspicious activity.” That is a real skill. That is a life skill. That is a workplace skill.

My friend, the world needs human firewalls. Families need them. Schools need them. Companies need them. Every department needs them: finance, HR, sales, support, healthcare, education, government, and small business. Cybersecurity starts with people, and RCCS helps people become strong.

So if you are ready to stop being an easy target, if you are ready to click smarter, verify faster, and report with confidence, RCCS is your next step.

RCCS is built with love, practical wisdom, and the belief that everyone can learn cyber safety. Every scenario should make you sharper. Every checklist should make you safer. Every habit should make your organization stronger.

My name is Haja Mo. Thank you for listening.

Ready to become the human firewall?

Join RCCS and learn how to spot phishing, protect accounts, use MFA, stop social engineering, secure devices, handle sensitive data, and report incidents — before small mistakes become major breaches.

pause before clicking · verify before trusting · report before hiding