5.5Test yourself & go further (SecNumacadémie)
The essentials in 30 seconds
- SecNumacadémie (ANSSI): free MOOC, 4 modules, certificate — the natural sequel to this guide.
- One watch actually read: one source (CERT-FR or Cybermalveillance) actually read beats five ignored feeds.
- Maintain: internal phishing = training, quizzes retaken — security is a subscription.
Running mini-case — Karim aims for the certificate
Building on his incident, his directory, his re-read charter and his team ritual, Karim registers on secnumacademie.anssi.fr: one module per fortnight, blocked time slots, Cybermalveillance watch read each month, guide quizzes retaken in 3 months with a colleague. Final episode of cases 5.1-5.4 — Karim completes his journey to the certificate.
Final episode of cases 5.1-5.4 — Karim rounds off reflexes, rules and culture with training.
1. The reference MOOC
SecNumacadémie is the reference cybersecurity MOOC, designed by ANSSI and entirely free (secnumacademie.anssi.fr). 4 modules open to all — no need to be an IT specialist — the natural culmination of this guide. Karim finds everything he practised there, in expanded form.
At the end: a certificate (useful on a CV) and a real skills boost. One module per fortnight is a comfortable pace: Karim blocks the slots like appointments.
2. Train and keep watch
Internal phishing tests are training, not traps: clicking there is learning, not misconduct — click rates fall with practice. Karim welcomes the next test like a friendly match.
One watch is enough — but it gets read: CERT-FR alerts or Cybermalveillance newsletters depending on your appetite. Better one monthly newsletter read than five ignored feeds.
3. Continuous training
Threats evolve constantly: security is a subscription, not a diploma. Re-test your reflexes regularly (this guide's quizzes in 3 months) and offer the path to a colleague: teaching means retaining twice.
After SecNumacadémie: CNIL MOOC (GDPR), sector awareness, then career paths for those wanting to switch — the security contact guides by profile.
🔎 Concrete example — Karim's 2-month plan
Beyond the guide, week by week.
Weeks 1-2: registration + module 1 (Overview): the guide prepared well.
Weeks 3-6: one module per fortnight, blocked slots, shared notes.
Each month: ONE watch newsletter read + 5 “cyber” min in team.
In 3 months: the guide quizzes retaken together + certificate on CV.Reading: a small pace kept beats a big plan abandoned.
Lesson: offering the path to a colleague doubles the effect.
Section vocabulary
- SecNumacadémie
- The free ANSSI MOOC: 4 complete modules with certificate — the natural sequel to this guide.
Simple example: Karim starts module 1 and finds the guide prepared him well.
What it is not: a paid antivirus or a social network.
Reflex: am I registered, with my slots blocked?
- ANSSI certificate
- The official recognition awarded on passing the MOOC.
Simple example: Karim adds the certificate to his CV and flags it internally.
What it is not: a final diploma that removes the need for watch.
Reflex: certificate targeted for what realistic date?
- Internal phishing test
- Fake phishing run by the company: training, not a trap.
Simple example: Karim clicks in the test: he learns, without misconduct or shame.
What it is not: a punishment or a trap set by IT.
Reflex: next test = next welcomed training.
- Security watch
- Staying up to date via ONE read source: CERT-FR, Cybermalveillance newsletters.
Simple example: Karim reads one newsletter a month and shares 1 alert at the ritual.
What it is not: five feeds subscribed and never opened.
Reflex: what is my single source — and when do I read it?
- Continuous training
- Security is maintained: threats renew, reflexes erode.
Simple example: Karim retakes the quizzes in 3 months and sponsors a colleague.
What it is not: “I finished the guide, I am protected forever”.
Reflex: are my quizzes scheduled in 3 months?
In practice — Your post-guide progression plan
- Register on secnumacademie.anssi.fr and start module 1 (“ISS Overview”): you will find this guide prepared you well.
- Aim for the certificate: one module per fortnight is a comfortable pace — block the slots.
- Subscribe to ONE watch source (Cybermalveillance or CERT-FR alerts depending on your appetite).
- Retake this guide's quizzes in 3 months: memory erodes, reflexes are maintained — and offer the path to a colleague.
Ready-to-say script — offer the path to a colleague
“This guide helped me a lot after my incident: I am now aiming for the SecNumacadémie certificate (free, ANSSI). Shall we do it together, one module per fortnight? We will test each other in 3 months with the guide quizzes.”
Say to a colleague over coffee, then send the secnumacademie.anssi.fr link right away.
Copy-paste template — post-guide plan
MY POST-GUIDE PLAN
MOOC: secnumacademie.anssi.fr registration on ___ | certificate targeted on ___
PACE: 1 module / fortnight, blocked slots: _______________
WATCH (1 source read): CERT-FR / Cybermalveillance: _______________
UPKEEP: quizzes retaken on ___ + path offered to: _______________Solo / tight budget
Karim alone: free end to end — MOOC, watch newsletters, guide quizzes: zero cost, just blocked slots.
Small / reduced team
Pair: two colleagues progress together, one module per fortnight, 10-minute debrief at each step.
SME in Algiers
Karim schedules his modules outside Algiers activity peaks and shares each lesson at the monthly team ritual.
After the certificate
CNIL MOOC (GDPR) then sector awareness; the contact person guides next steps by profile.
✓ Best practices
- Aim for the SecNumacadémie certificate (free, official).
- Subscribe to ONE watch source and actually read it.
- Re-test your reflexes regularly (the guide quizzes).
✗ Common pitfalls
- Treating cybersecurity as a diploma earned once.
- Subscribing to five watch feeds... and reading none.
- Experiencing an internal phishing test as punishment.
Key takeaways
- SecNumacadémie: free, official, with certificate — the best cybersecurity training investment there is.
- Internal phishing tests are training: clicking there is learning, not misconduct.
- One watch source is enough, but it gets read: better one monthly newsletter read than five ignored feeds.
- Cybersecurity is maintained: re-test your reflexes regularly, threats renew.
48h challenge — apply tomorrow
Register on secnumacademie.anssi.fr, start module 1 and subscribe to 1 watch source: slots blocked in the calendar.
- I can present SecNumacadémie in one sentence.
- I am registered with 1 module started.
- My watch source is chosen (and read).
Frequently asked questions
How long does SecNumacadémie take?
Allow about twenty hours for the 4 modules — at your pace, and this guide's lessons speed up a good part of it. One module per fortnight stays comfortable.
Are there more advanced cyber certifications for non-IT people?
After SecNumacadémie: the CNIL MOOCs (GDPR), sector awareness, then — for those wanting to switch careers — CyberEdu-type paths or entry certifications. Your security contact can guide by profile.
Karim finished the guide. What do you advise next?