Cyber awareness training

We offer bite-sized training courses for staff. Learn how to protect yourself and others from cybercrime and be cyber confident. 

From data breaches, to phishing scams and malware, cybersecurity threats pose a significant risk. They can disrupt operations, compromise sensitive information and damage the University's reputation.

At York, you play a crucial role in safeguarding data. To equip you with the knowledge and know-how, we provide mandatory and supplementary training through MetaCompliance, our training platform for cyber security. 

Access training

When you're enrolled onto MetaCompliance and given access to a course, you’ll receive an email from infocompliance-noreply@york.ac.uk. The email will include a link to the course.

Once enrolled, you can access and revisit training courses at any time.

Access training

Log in with your University email address and password. Duo two-factor authentication is required.

Training courses

Core cybersecurity series 

  • Who this is for: all staff.
  • Learning outcomes: to protect you from cybercrime in both your personal and work lives.
  • Topics: 
    • Data protection and law
    • Records management and disposal
    • Strong passwords, multi-factor authentication and password managers
    • Common scams 
    • Avoiding phishing threats

Advanced series

  • Who is this for: staff with specific roles.
  • Learning outcomes: to inform specialist staff about role-specific cyber risks and and overcome vulnerabilities. 
  • Topics:
    • Bring your own device (BYOD) - for IT professionals
    • Managed device software installs - for IT professionals
    • High-flex permissions - for IT professionals
    • Open Web Application Security Project (OWASP) Top Ten - for Web Application Developers

If you can’t see the course you’re interested in, please contact IT Services.

When you'll get access

University employees are enrolled onto the MetaCompliance online platform within two weeks of joining the University. 

Associate staff working within the Centre for Health Economics, Health Sciences and York Health Economics Consortium are also given access.

You’ll receive email prompts inviting you to complete the training. If you’re a new starter, please wait to receive your initial email to commence your training (you won’t be able to immediately log in until you’re provisioned).

Associate staff

Associate staff do not have access to MetaCompliance (aside from those working within the Centre for Health Economics, Health Sciences and York Health Economics Consortium) but do have access to alternative cybersecurity and data protection training.