Cybersecurity & Online Safety Basics Kozi

1. Utangulizi wa Kozi

Kozi hii imeandaliwa kwa ajili ya watu wanaotaka kujifunza jinsi ya kulinda data yao, biashara, na vifaa vya kidijitali dhidi ya hatari za mtandao. Lengo ni kuwapa wanafunzi ujuzi wa msingi wa cybersecurity na mbinu za online safety.

Kwa Nani Kozi Hii?

• Wajasiriamali wanaotumia mtandao kwa biashara zao

• Waajiriwa wa ofisi zinazohusisha data na systems

• Freelancers wanaofanya kazi mtandaoni

• Wanafunzi wa IT na teknolojia

Malengo ya Kozi

Baada ya kumaliza kozi, mwanafunzi ataweza:

• Kutambua hatari mbalimbali za mtandao (cyber threats)

• Kutumia mbinu sahihi za password management

• Kuzuia na kulinda dhidi ya phishing, malware, na ransomware

• Kuelewa na kutumia VPN, firewalls, na anti-virus tools

• Kuunda mazingira salama ya kazi na mtandaoni

2. Module 1: Utangulizi wa Cybersecurity

• Maana na umuhimu wa cybersecurity

• Hatari za kawaida mtandaoni: viruses, malware, phishing, hacking

• Roles na responsibilities za mtumiaji

3. Module 2: Password Management

• Mbinu za kuunda password salama

• Password managers (examples: LastPass, 1Password)

• Two-factor authentication (2FA) basics

4. Module 3: Phishing na Social Engineering

• Kutambua emails na messages za phishing

• Fake websites na scams mtandaoni

• Mbinu za kuepuka social engineering attacks

5. Module 4: Malware na Virus Protection

• Aina za malware: viruses, worms, ransomware, spyware

• Installing na updating anti-virus software

• Safe downloading na browsing practices

6. Module 5: VPN, Firewalls, na Network Security

• Maana ya VPN na jinsi inavyolinda data

• Firewalls basics (software na hardware)

• Securing home and office networks

7. Module 6: Online Safety Practices

• Email, social media, na cloud storage safety

• Backups na data recovery

• Awareness of personal and business data protection

8. Module 7: Case Studies na Exercises

• Identifying threats in sample emails and websites

• Setting up 2FA and password managers

• Simulating malware attacks safely for learning purposes

Module hii inatoa msingi wa uelewa wa cybersecurity na mbinu za kuzuia hatari mtandaoni.

Maana na Umuhimu wa Cybersecurity

• Cybersecurity ni ulinzi wa mifumo ya kompyuta, data, na mtandao dhidi ya uharibifu, uvunjaji wa data, au upotevu.

• Umuhimu wake ni kuhakikisha biashara, ofisi, na maisha binafsi yanaendelea salama mtandaoni.

Hatari za Kawaida Mtandaoni

• Viruses: Programs zinazoharibu au kuingilia kompyuta.

• Malware: Software inayoundwa kwa madhumuni mabaya (viruses, worms, spyware, ransomware).

• Phishing: Emails au messages bandia zinazojaribu kudanganya watumiaji kutoa taarifa zao.

• Hacking: Kufikia mifumo bila ruhusa ili kupata data au kudhibiti vifaa.

Roles na Responsibilities za Mtumiaji

• Kufahamu hatari na kuepuka activities hatarishi mtandaoni.

• Kutumia password salama na two-factor authentication.

• Kuripoti hatari, scams, au security breaches kwa wahusika husika.

• Kufuata taratibu na policies za cybersecurity kazini na nyumbani.

Module hii inafundisha mbinu sahihi za kuunda na kudumisha passwords salama ili kulinda akaunti na data mtandaoni.

Mbinu za Kuunda Password Salama

• Tumia mchanganyiko wa herufi kubwa, herufi ndogo, nambari, na alama za kipekee.

• Usitumie taarifa rahisi kama jina lako, tarehe ya kuzaliwa, au nambari rahisi.

• Badilisha password mara kwa mara na usitumie password moja kwa akaunti zote.

Password Managers

• Tools zinazohifadhi na kusimamia passwords zako kwa usalama.

• Mifano: LastPass, 1Password, Bitwarden.

• Zinapunguza hatari ya kutumia passwords rahisi au kurahisisha login kwa websites nyingi.

Two-Factor Authentication (2FA) Basics

• Mbinu ya kuongeza ulinzi kwa kuhitaji uthibitisho wa ziada baada ya password.

• Njia za 2FA: SMS code, authenticator app (Google Authenticator), email verification.

• Inapunguza hatari ya akaunti kuibiwa hata kama password imevunjika.

Module hii inafundisha jinsi ya kutambua na kuepuka hatari zinazotokana na phishing na social engineering.

Kutambua Emails na Messages za Phishing

• Angalia emails zinazotaka taarifa binafsi au kifedha haraka.

• Angalia URLs bandia na errors za spelling au grammar.

• Usibofye links au download attachments kutoka kwa senders wasiojulikana.

Fake Websites na Scams Mtandaoni

• Websites bandia zinazojifanya ni halali (bank, payment, social media).

• Angalia HTTPS, domain name, na signals nyingine za usalama.

• Usitegemei ads au pop-ups zinazodai kutoa offers zisizo za kawaida.

Mbinu za Kuepuka Social Engineering Attacks

• Usikie au ujibu maombi ya taarifa binafsi bila kuthibitisha source.

• Kagua maombi ya data binafsi na uthibitishe kwa njia nyingine.

• Elimisha taarifa nyeti online, epuka kushiriki passwords, PIN, au data ya kifedha mtandaoni.

Module hii inafundisha namna ya kutambua na kulinda kompyuta na data dhidi ya malware na viruses.

Aina za Malware

• Viruses: Programs zinazojumuishwa kwenye files ili kuharibu au kuingilia kompyuta.

• Worms: Software zinazosambaa kwenye network na kuharibu data au systems.

• Ransomware: Malware inayofunga data au systems na kudai fidia.

• Spyware: Software inayokusanya taarifa za mtumiaji bila ruhusa.

Installing na Updating Anti-virus Software

• Chagua anti-virus software yenye sifa nzuri na updates za mara kwa mara.

• Fanya scanning ya mfumo wa kompyuta mara kwa mara.

• Activate automatic updates na real-time protection.

Safe Downloading na Browsing Practices

• Pakua files kutoka kwa websites rasmi na zinazojulikana.

• Epuka clicking kwenye links zisizo rasmi au pop-ups hatarishi.

• Tumia browser security settings na extensions zinazolinda dhidi ya malware.

Module hii inafundisha mbinu za kulinda data na networks katika nyumba au ofisi.

Maana ya VPN na Jinsi Inavyolinda Data

• VPN (Virtual Private Network) huficha IP yako na encrypts traffic ya internet.

• Inazuia hackers na unauthorized access kwenye data zako.

• Inasaidia kufanya online activities salama hata kwenye networks za public Wi-Fi.

Firewalls Basics (Software na Hardware)

• Firewall ni system inayozuia traffic isiyo sahihi kuingia kwenye network yako.

• Software firewalls: installed kwenye kompyuta au servers.

• Hardware firewalls: devices zinazowekwa kwenye network ili kudhibiti traffic.

• Kila firewall inaruhusu configuration ya rules za traffic inayoingia na kutoka.

Securing Home and Office Networks

• Tumia WPA3/WPA2 encryption kwa Wi-Fi networks.

• Badilisha passwords za default za router na devices.

• Update firmware na software mara kwa mara.

• Limit access kwa mtumiaji anayeweza kuingia kwenye network.

Module hii inafundisha mbinu za kulinda taarifa na akaunti zako mtandaoni kwa usalama.

Email, Social Media, na Cloud Storage Safety

• Tumia passwords imara na 2FA kwa email na social media accounts.

• Usishiriki passwords au PIN kwenye platforms zisizo rasmi.

• Hakikisha cloud storage accounts zime password imara na encryption ikiwa inapatikana.

• Kagua privacy settings kwenye social media na email accounts.

Backups na Data Recovery

• Fanya backups mara kwa mara ya files muhimu kwa external drives au cloud storage.

• Fahamu njia za data recovery ikiwa data imepotea au imeharibiwa.

• Test backups periodically kuhakikisha data inaweza kurekebishwa bila shida.

Awareness of Personal and Business Data Protection

• Tofautisha data binafsi na data ya biashara.

• Fanya training kwa wafanyakazi kuhusu online safety na data protection.

• Kagua policies za data protection na ufuate guidelines za kampuni au serikali.