01. ASSESS
Recognise
the hazard.
An unexpected demand for money, an unfamiliar login or a locked screen can signal a cyber incident. Stop, observe and follow your organisation’s response procedure.
The FRCT programme
Ninety minutes.
Three moves.
One card.
First Response for Cyber Threats gives employees a practical way to respond in the gap before professional help takes over.
Enquire about FRCTRecognise
02. BLOCK
Limit
the exposure.
Follow the approved isolation procedure. For ordinary workstations, this may mean disconnecting the network cable or Wi-Fi. Operational and clinical systems require site-specific instructions.
03. HAND OFF
Give IT
something useful.
Record the device, time, last action and what you observed. Report through the designated channel. Avoid restarting or deleting files unless your authorised response team directs you.
A consistent handoff
The details your
IT team needs.
A common incident card helps the next responder understand what happened and where to begin.
FRCT / First response
INCIDENT CARD
Machine or station ID
Time you noticed it
The last thing you did before it
What you saw on the screen
Who you reported it to
Preserve what you see. Follow your response procedure.Built for a common
standard of response.
The learning experience
Five modules, a tabletop drill and sector-specific scenarios within a common 90-minute curriculum.
The trainer model
Trainer certification before delivery and annual recertification are part of the FRCT model.
The credential pathway
The August 2026 plan includes a University of Windsor Continuing Education micro-credential and an EC-Council alignment pathway through Sterling’s Authorized Training Partner status. Contact us to confirm current availability and award requirements.
For employers
A shared protocol, a structured incident card and a record of training help support workplace preparedness and internal reporting.
Start a conversation