Week 8 password and account security

 

REMOTE WORK SKILLS TRAINING

MONTH 2 — WORKING PROFESSIONALLY

WEEK 8 — REMOTE WORK SECURITY & PROFESSIONALISM

DAY 36: PASSWORDS AND ACCOUNT SECURITY

Objectives

By the end of this lesson, students should be able to:

  1. Explain what a password is and why it matters.

  2. Explain the difference between a password and a passphrase.

  3. Create strong, unique passwords.

  4. Explain why reusing passwords is dangerous.

  5. Understand multi-factor authentication (MFA).

  6. Identify common account-security weaknesses.

  7. Use password managers appropriately.

  8. Protect work accounts and client accounts.

  9. Recognize suspicious login activity.

  10. Respond appropriately when an account may have been compromised.


SOFTWARE / TOOLS

  • Google Password Manager — stores and helps manage passwords.

  • Microsoft Authenticator — supports multi-factor authentication.

  • Google Authenticator — generates authentication codes.

  • 1Password — password management.

  • Bitwarden — password management.

  • Gmail / Outlook — common professional accounts requiring strong security.

  • Google Workspace / Microsoft 365 — business accounts that may contain important company information.


1. WHAT IS A PASSWORD?

A password is a secret string of characters used to prove that you are authorized to access an account or system.

For example:

MyDog123

is a password, but it is not a strong one.

A password protects access to resources such as:

  • Email

  • Social media

  • Banking

  • Cloud storage

  • Work platforms

  • CRM systems

  • Project-management systems

  • Company websites

  • Developer accounts

Why does this matter for remote workers?

A remote worker may have access to several client systems.

If one account is compromised, an attacker may gain access to:

  • Client files

  • Emails

  • Customer information

  • Company systems

  • Financial information

  • Other accounts

Therefore:

Your account security can affect the entire organization you work for.


2. WHAT MAKES A PASSWORD STRONG?

A strong password should generally be:

  • Long

  • Unique

  • Difficult to guess

  • Not based on obvious personal information

  • Not reused across important accounts

For example:

Weak:

raheem123

Better:

Blue-Window-River-Cloud-47

An even better approach is to use a password manager to generate a long random password.


3. PASSWORD LENGTH MATTERS

One of the most important principles is:

Longer passwords are generally harder to guess than short passwords.

Compare:

Admin123

with:

River-Cloud-Orange-Window-84

The second is considerably longer and less predictable.

For important accounts, use passwords generated or recommended by a reputable password manager where possible.


4. PASSWORD VS PASSPHRASE

Password

A password may be a mixture of:

  • Letters

  • Numbers

  • Symbols

Example:

K7!pQ2@zL9

Passphrase

A passphrase is a longer combination of words.

Example:

River-Coffee-Window-Planet-72

The important principle is length and unpredictability, not simply adding one symbol to a common word.


5. NEVER REUSE IMPORTANT PASSWORDS

One of the most dangerous habits is:

Using the same password for every account.

Imagine you use:

Raheem@123

for:

  • Gmail

  • Facebook

  • LinkedIn

  • Upwork

  • Microsoft

  • Client CRM

If one website is breached and that password becomes known, attackers may try the same password on your other accounts.

This is known as credential stuffing.

Better approach

Use a different password for every important account.


6. PASSWORD MANAGERS

A password manager is software that securely stores and manages passwords.

Examples include:

  • Bitwarden

  • 1Password

  • Google Password Manager

  • Apple Passwords

  • Microsoft password-management features

Instead of remembering 30 different passwords, you mainly need to protect your password-manager account.

Example

Instead of manually creating:

Facebook123
Gmail123
LinkedIn123
Upwork123

the password manager can generate different passwords for each account.

Important principle

Your password manager itself must be strongly protected.

Use:

  • A strong master password/passphrase

  • MFA where available

  • Recovery options you control


7. WHAT IS MULTI-FACTOR AUTHENTICATION?

Multi-Factor Authentication (MFA) adds another verification step after the password.

Instead of:

Password → Login

you may have:

Password → Verification → Login

The second factor could involve:

  • Authentication app

  • Security key

  • Passkey

  • SMS code

  • Biometric verification


8. WHY MFA MATTERS

Suppose an attacker somehow obtains your password.

Without MFA:

Attacker → Password → Account

With MFA:

Attacker → Password → Additional verification required

This creates another security barrier.

Important

MFA is not a replacement for strong passwords.

Use:

Strong unique password + MFA

whenever supported.


9. COMMON TYPES OF MFA

1. Authentication App

Apps such as:

  • Google Authenticator

  • Microsoft Authenticator

can generate temporary verification codes.

2. Security Key

A physical security device can be used to authenticate.

3. Passkeys

Passkeys use modern authentication technology and can reduce dependence on traditional passwords.

4. SMS Codes

A code may be sent to your phone.

SMS can be useful, but stronger authentication methods may be preferable when available.

5. Biometrics

Examples:

  • Fingerprint

  • Face recognition


10. WHAT IS A PASSKEY?

A passkey is a modern authentication method that can allow you to sign in using a device-based credential, often protected by your device's PIN or biometrics.

Instead of typing a password every time:

Device verification → Authentication

Passkeys can help reduce the risks associated with password theft and phishing.


11. COMMON PASSWORD MISTAKES

Remote workers should avoid:

Mistake 1 — Using Your Name

Raheem123

Mistake 2 — Using Your Phone Number

080XXXXXXXX

Mistake 3 — Using Your Birthday

1993XXXX

Mistake 4 — Using “Password”

Password123

Mistake 5 — Reusing One Password

Same password everywhere.

Mistake 6 — Sharing Passwords Through Chat

For example:

“Here is my Gmail password: ******”

Mistake 7 — Saving Passwords in an Unprotected Document

For example:

Passwords.xlsx

with all account credentials inside.

Mistake 8 — Leaving Accounts Logged In on Shared Devices

Especially on:

  • Public computers

  • Cybercafés

  • Borrowed laptops

  • Shared office computers


12. SECURITY QUESTIONS

Some services use security questions such as:

What is your mother's maiden name?

or:

What city were you born in?

Be careful.

Answers based on publicly available information may be easier to guess.

Where a service permits it, use stronger account-recovery options and protect recovery information carefully.


13. ACCOUNT RECOVERY INFORMATION

Account recovery can be just as important as your password.

Examples:

  • Recovery email

  • Recovery phone

  • Authentication device

  • Backup codes

  • Passkey

  • Security key

Make sure recovery methods are:

  • Current

  • Secure

  • Accessible to you

Do not store recovery codes openly where anyone can access them.


14. LOGIN ALERTS

Many services notify you when a new login occurs.

For example:

“New sign-in detected from a Windows device.”

If you recognize it:

Review → Confirm

If you don't recognize it:

Investigate → Secure account

Possible actions include:

  • Change password

  • Sign out of unknown sessions

  • Revoke suspicious access

  • Check recovery information

  • Enable MFA

  • Contact the service provider


15. ACCOUNT SESSION MANAGEMENT

Some services allow you to view:

  • Devices

  • Active sessions

  • Login locations

  • Recent activity

  • Connected applications

Regularly reviewing this information can help identify suspicious access.

Example

You work remotely from Abuja.

Your account suddenly shows a login from a device/location you don't recognize.

Don't simply ignore it.

Investigate it.


16. THIRD-PARTY APPLICATION ACCESS

You may connect applications to:

  • Google

  • Microsoft

  • Slack

  • Dropbox

  • LinkedIn

  • Other work accounts

For example:

“Allow this application to access your Google Drive.”

Before approving access, ask:

  1. Do I trust this application?

  2. Does it really need this permission?

  3. What information will it access?

  4. Is the connection still necessary?

Remove access that is no longer needed.


17. WORK ACCOUNTS VS PERSONAL ACCOUNTS

A professional remote worker may have:

Personal accounts

  • Personal Gmail

  • Facebook

  • Personal cloud storage

Work accounts

  • Company email

  • Client CRM

  • Project management account

  • Company Google Workspace

  • Microsoft 365

Do not casually mix them.

For example:

Don't automatically upload a client document to your personal Google Drive just because it is convenient.

Follow the client's/company's approved workflow.


18. CLIENT ACCOUNT SECURITY

If a client gives you access to:

  • Email

  • CRM

  • Social media

  • Website

  • Cloud storage

treat the account as a professional responsibility.

Never:

  • Share credentials unnecessarily.

  • Download client information to unsafe devices.

  • Give access to friends.

  • Use the account for personal purposes.

  • Save sensitive information in random places.

Always:

  • Follow the client's security policy.

  • Use approved devices/tools.

  • Enable MFA where appropriate.

  • Report suspicious activity.


19. WHAT TO DO IF YOU THINK YOUR ACCOUNT WAS COMPROMISED

Follow this basic process:

STEP 1 — Stay Calm

Don't make random changes without understanding what happened.

STEP 2 — Secure the Account

Change the password using a trusted device.

STEP 3 — Enable MFA

If it isn't already enabled.

STEP 4 — Review Active Sessions

Sign out unknown devices/sessions.

STEP 5 — Check Recovery Information

Make sure the attacker has not changed:

  • Recovery email

  • Recovery phone

  • MFA settings

STEP 6 — Review Account Activity

Look for suspicious:

  • Emails

  • Messages

  • Files

  • Transactions

  • Password changes

STEP 7 — Report It

If it's a work/client account, notify the appropriate person immediately.


REAL-LIFE EXAMPLE 1 — VIRTUAL ASSISTANT

A VA manages a client's Gmail account.

The VA uses the same password for Gmail and several other websites.

One of those websites suffers a credential leak.

An attacker tries the same password on the client's email account.

Problem

Password reuse has created unnecessary risk.

Better practice

Use a unique password and MFA for the email account.


REAL-LIFE EXAMPLE 2 — REMOTE DATA ENTRY WORKER

A data-entry worker uses a shared computer at a public location and logs into a client's cloud storage.

After finishing work, the worker leaves the account logged in.

Problem

The next person may be able to access the client's files.

Better practice

  • Use an appropriate trusted device.

  • Sign out when finished.

  • Don't save passwords on shared computers.

  • Follow client security requirements.


REAL-LIFE EXAMPLE 3 — REMOTE WEB DEVELOPER

A developer has access to:

  • GitHub

  • Hosting

  • Database

  • Client email

  • Cloud services

The developer uses one password for multiple services.

If that password is compromised, several systems may be at risk.

Better practice

Use:

Unique credentials + MFA/passkeys where supported + least privilege + secure credential management.


CLASSWORK

Activity 1 — Password Security Audit

Create a list of 10 account categories you commonly use.

For example:

  1. Email

  2. Social media

  3. Cloud storage

  4. Work platform

  5. Developer account

Do not write your actual passwords.

For each account, identify:

  • Is the password unique?

  • Is MFA enabled?

  • Is recovery information available?

  • Is the account important?

  • Does it need stronger protection?


Activity 2 — Identify the Security Problem

Identify the security problem in each statement:

  1. “I use one password everywhere because it is easier.”

  2. “I sent my password to my colleague through WhatsApp.”

  3. “I don't need MFA because my password is strong.”

  4. “I saved all my passwords in an unprotected text file.”

  5. “I received a login alert from an unknown device but ignored it.”


Activity 3 — Account Protection Plan

Create a personal Remote Work Account Security Plan containing:

  • Password strategy

  • MFA strategy

  • Password-manager strategy

  • Recovery strategy

  • Device-security strategy

  • Suspicious-login response


ASSIGNMENT 1 — PASSWORD SECURITY IMPROVEMENT PLAN

Create a document titled:

MY REMOTE WORK ACCOUNT SECURITY PLAN

Include:

Part A

List 10 important account categories.

Part B

For each account, identify:

  • Importance

  • MFA availability

  • Recovery method

  • Current security status

Part C

Write 10 security improvements you should make.

Do not submit actual passwords, MFA codes, recovery codes, or other credentials.


ASSIGNMENT 2 — ACCOUNT COMPROMISE SCENARIO

Write a professional response to this situation:

“You receive an alert that someone has logged into your client's email account from an unfamiliar device. You are currently working remotely.”

Explain:

  1. What you would do first.

  2. How you would secure the account.

  3. What you would check.

  4. What you would report to the client.

  5. How you would prevent a similar incident in the future.


PRACTICAL CHALLENGE

REMOTE WORKER SECURITY CHECKUP

Perform a security check on your own non-sensitive test/personal account.

Check whether you can find:

  • Recent login activity

  • Active sessions/devices

  • MFA settings

  • Recovery information

  • Connected applications

  • Security alerts

Then document what you found.

Do not submit passwords, verification codes, recovery codes, or private security information.


KEY LESSON

A remote worker is not only responsible for completing work; they are also responsible for protecting the accounts and information they are trusted with.

Remember:

Unique Password → MFA/Passkey → Secure Device → Limited Access → Monitor Activity → Respond Quickly

And most importantly:

Never share your password, MFA code, recovery code, or private credentials just because someone asks for them.


NEXT

DAY 37: PHISHING, FAKE JOBS AND ONLINE SCAMS


REMOTE WORK SKILLS TRAINING

MONTH 2 — WORKING PROFESSIONALLY

WEEK 8 — REMOTE WORK SECURITY & PROFESSIONALISM

DAY 37: PHISHING, FAKE JOBS AND ONLINE SCAMS

Objectives

By the end of this lesson, students should be able to:

  1. Explain phishing and online scams.

  2. Identify common phishing messages.

  3. Recognize fake remote-job opportunities.

  4. Identify suspicious websites, emails, messages and job offers.

  5. Understand common social-engineering techniques.

  6. Verify job opportunities before responding.

  7. Identify suspicious payment and recruitment requests.

  8. Protect personal, professional and financial information.

  9. Respond appropriately to suspected scams.

  10. Explain how legitimate remote workers can protect themselves and clients.


SOFTWARE / TOOLS

  • Gmail — email security and phishing warnings.

  • Outlook — email protection and suspicious-message reporting.

  • Google Chrome — checking websites and URLs.

  • Microsoft Edge — browser security features.

  • LinkedIn — finding and evaluating job opportunities.

  • Upwork — freelance opportunities and platform-based communication.

  • Fiverr — freelance services.

  • Google Search — independent verification.

  • Google Safe Browsing — checking potentially dangerous websites.

  • VirusTotal — analyzing suspicious URLs/files when appropriate.

Important: Never upload confidential client files or sensitive personal information to a public scanning service.


1. WHAT IS PHISHING?

Phishing is a cyberattack where someone attempts to trick you into revealing information, clicking a harmful link, downloading something dangerous, or performing an action that benefits the attacker.

The attacker may pretend to be:

  • Your employer

  • A client

  • A bank

  • A technology company

  • A recruiter

  • A colleague

  • A delivery company

  • A government organization

  • A friend

The message may look genuine.

Example

You receive:

“Your Microsoft account will be permanently disabled today. Click here to verify your account.”

The goal may be to make you panic and click a fake login page.


2. WHY PHISHING WORKS

Phishing often attacks human behavior, not just technology.

Attackers may create:

Urgency

“Act within 10 minutes.”

Fear

“Your account will be suspended.”

Curiosity

“See the confidential document here.”

Authority

“This is your manager. Send the file immediately.”

Greed

“You have won ₦500,000.”

Opportunity

“You have been selected for a remote job paying $2,000 per month.”

These psychological techniques are examples of social engineering.


3. WHAT IS SOCIAL ENGINEERING?

Social engineering is manipulating people into taking actions or revealing information that they normally would protect.

The attacker may not need to break into a system directly.

Instead, they may convince someone to:

  • Give them a password

  • Reveal an MFA code

  • Open a malicious attachment

  • Transfer money

  • Change account details

  • Download software

  • Share confidential information

Key principle

Sometimes the easiest way to bypass security is to trick the person operating the system.


4. COMMON PHISHING CHANNELS

Phishing can happen through:

  • Email

  • WhatsApp

  • SMS

  • Social media

  • LinkedIn

  • Telegram

  • Fake websites

  • Phone calls

  • Video meetings

  • Collaboration platforms

It is not limited to email.


5. PHISHING EMAIL EXAMPLE

Imagine receiving:

Subject: URGENT: Verify Your Account

Dear User,
Your account has been selected for security verification.
Click here immediately to prevent suspension.

Warning signs

  • Generic greeting

  • Urgent language

  • Threat of suspension

  • Unexpected verification request

  • Suspicious link

  • Pressure to act immediately


6. CHECK THE SENDER

Don't look only at the display name.

For example:

Microsoft Support

may actually come from:

microsoft-support-example@gmail.com

The display name can be misleading.

Check the actual email address and domain.

Important

A professional-looking sender name does not prove that the message is genuine.


7. CHECK THE LINK

Before clicking a suspicious link, inspect the destination where possible.

For example, a message may say:

“Visit Google Drive.”

But the actual destination may be an unrelated domain.

Look carefully for:

  • Misspelled domains

  • Strange subdomains

  • Extra words

  • Unusual characters

  • Shortened links

  • Unexpected domains

Example

A suspicious address might look like:

google-login-example.com

The presence of the word Google does not make it Google's website.


8. HTTPS DOES NOT AUTOMATICALLY MEAN SAFE

Many people think:

“It has HTTPS, so it must be legitimate.”

That's incorrect.

HTTPS helps encrypt the connection between your browser and the website, but a scam website can also use HTTPS.

Therefore:

Check who owns the domain, not just whether HTTPS is present.


9. FAKE LOGIN PAGES

One common phishing technique is creating a fake login page.

It may look like:

  • Gmail

  • Microsoft

  • LinkedIn

  • Facebook

  • PayPal

  • Bank website

  • Company portal

You enter:

Email → Password → MFA code

The attacker may then receive your credentials.

Better habit

When an unexpected message asks you to log in:

Don't use the message link immediately.

Instead, open the service through a trusted bookmark or manually navigate to the official website/app.


10. MFA CODES CAN ALSO BE STOLEN

Some people think:

“I have MFA, so nobody can scam me.”

Attackers may still try to trick you into giving them the MFA code.

For example:

“I am helping you secure your account. Tell me the six-digit code you just received.”

Never do this.

Your MFA code is for your authentication, not for someone who contacts you asking for it.


11. WHAT IS A FAKE REMOTE JOB?

A fake remote job is an apparent employment or freelance opportunity designed to deceive the applicant.

The goal may be to:

  • Steal money

  • Steal identity information

  • Collect passwords

  • Obtain financial information

  • Install malware

  • Steal documents

  • Use your account for fraud

  • Obtain personal information


12. COMMON FAKE JOB WARNING SIGNS

Be careful when a supposed employer:

1. Promises unusually high pay for almost no work

Example:

“Earn ₦500,000 every week working only 1 hour daily.”

2. Guarantees employment immediately

“Congratulations! You have been hired without an interview.”

3. Requests payment to get the job

Examples:

  • Registration fee

  • Training fee

  • Equipment fee

  • Clearance fee

  • Activation fee

A payment request doesn't automatically prove fraud, but an unexpected fee to secure a supposed job is a major warning sign.

4. Requests sensitive information too early

For example:

  • Bank login credentials

  • Passwords

  • MFA codes

  • Unnecessary identity information

5. Uses suspicious communication channels

For example:

“Send your banking details to this random Gmail address.”

6. Creates extreme urgency

“Pay within 30 minutes or lose the job.”


13. LEGITIMATE JOBS CAN STILL BE REMOTE

Remote work itself is not a scam.

There are legitimate opportunities through:

  • Company career pages

  • LinkedIn

  • Reputable job boards

  • Established freelance platforms

  • Professional networks

The important skill is verification.


14. VERIFY THE COMPANY

Before applying or providing important information, investigate the organization.

Check:

  1. Company website

  2. Official company email domain

  3. LinkedIn presence

  4. Job posting

  5. Employee/company information

  6. Company registration where relevant

  7. Independent references

  8. Whether the opportunity appears on the company's official careers page

Example

Someone claims:

“We are hiring for XYZ Company.”

Instead of trusting the message:

Search for the company's official website → find its careers page → check whether the position exists.


15. DON'T TRUST A LOGO

Scammers can copy:

  • Company logos

  • Job descriptions

  • Website designs

  • Recruiter profiles

  • Company names

  • Email signatures

Therefore:

Professional appearance is not proof of legitimacy.


16. FAKE RECRUITER ACCOUNTS

A scammer may create a LinkedIn profile saying:

“Senior Recruitment Manager — International Company”

The profile may have:

  • Professional photo

  • Company logo

  • Job description

  • Many connections

  • Professional language

Still, the identity may be fake.

Verify independently.

If necessary, contact the company through an official channel rather than relying solely on the recruiter's message.


17. FAKE INTERVIEW SCAMS

Some scammers conduct fake interviews.

They may eventually ask you to:

  • Pay for equipment

  • Purchase gift cards

  • Transfer money

  • Download suspicious software

  • Share passwords

  • Give bank credentials

  • Receive and forward money

Warning

A video call does not automatically prove that a job is legitimate.


18. EQUIPMENT CHECK SCAM

A fake employer might say:

“You need to buy a laptop from our approved vendor before starting.”

They then provide a payment link.

You pay.

The company disappears.

Better approach

Be cautious when an employer requires you to send money to an unknown person or vendor before employment.

Verify the company and process independently.


19. CHECK PAYMENT REQUESTS

Be especially careful with:

“Pay first, earn later.”

Examples:

  • Pay ₦20,000 to unlock the job.

  • Pay ₦50,000 for mandatory recruitment.

  • Buy cryptocurrency to receive your salary.

  • Send money to process your employment.

  • Purchase gift cards and send the codes.

  • Receive money and send part of it to another account.

These are significant warning signs.


20. MONEY-MULE SCAMS

A scammer may offer a remote job such as:

“Payment Processing Assistant”

Your task is supposedly to receive money into your personal account and transfer it elsewhere.

This can expose you to serious financial and legal problems.

Rule

Don't use your personal bank account to receive and forward money for an unknown employer or client unless there is a legitimate, verified business reason and appropriate authorization.


21. FAKE CHECK / OVERPAYMENT SCAM

A supposed employer may send you more money than required.

For example:

“We accidentally paid you ₦1,000,000 instead of ₦100,000. Send ₦900,000 back.”

The original payment may later be reversed or discovered to be fraudulent.

You could lose the money you sent back.

Don't rush.

Verify unusual payments independently.


22. FAKE FREELANCE CLIENTS

A person may contact a freelancer and say:

“I need a website urgently. Send me your personal email and bank details.”

Then they may:

  • Send a suspicious file

  • Ask you to pay another person

  • Request account access

  • Send fake payment confirmation

  • Ask you to purchase something

  • Attempt to steal your credentials

Better practice

Keep communication and payments within established platforms when appropriate, especially until trust and legitimacy are established.


23. MALICIOUS FILES

A scammer may send:

Job_Contract.pdf.exe

The file may appear to be a document but actually be an executable program.

Be careful with unexpected:

  • .exe

  • .msi

  • .bat

  • .scr

  • .cmd

  • Macro-enabled office files

  • Unknown compressed files

Don't open suspicious files simply because they have a professional filename.


24. FAKE GOOGLE DRIVE / MICROSOFT DOCUMENT

You may receive:

“Raheem shared a document with you.”

The link appears to be a cloud document.

After clicking, you're asked to log in.

The page may be designed to steal your credentials.

Better practice

Access cloud services through trusted apps/websites when possible and verify unexpected sharing invitations.


25. WHATSAPP JOB SCAMS

A common pattern is:

“Hello dear, we have a remote job opportunity. Earn ₦50,000 daily. Contact our recruitment officer on WhatsApp.”

Warning signs include:

  • Unsolicited job messages

  • Unrealistic income

  • No clear company identity

  • Immediate payment request

  • Telegram/WhatsApp-only recruitment

  • Pressure to recruit other people

  • Requests for sensitive information


26. SOCIAL MEDIA GIVEAWAY SCAMS

A scammer may claim:

“Congratulations! You have won ₦1,000,000.”

Then ask you to pay:

“Processing fee: ₦5,000.”

Rule

Don't assume you won something simply because someone says you did.

Verify the promotion through the organization's official account or website.


27. THE PAUSE–VERIFY–ACT METHOD

Before responding to suspicious messages:

PAUSE

Don't react immediately.

VERIFY

Check:

  • Sender

  • Website

  • Company

  • Request

  • Context

  • Independent sources

ACT

Only proceed when you are reasonably confident the request is legitimate.


28. THE 7-QUESTION SCAM CHECK

Before accepting a remote opportunity, ask:

  1. Who is contacting me?

  2. What company do they represent?

  3. Can I independently verify the company?

  4. Does the job actually exist?

  5. Why are they asking for this information?

  6. Why do they need money from me?

  7. What happens if I don't act immediately?

If the answers don't make sense, stop and investigate.


REAL-LIFE EXAMPLE 1 — FAKE REMOTE JOB

A person receives:

“Work from home and earn ₦400,000 weekly. No experience required. Pay ₦15,000 registration fee today.”

Warning signs

  • Extremely attractive income

  • No experience requirement

  • Upfront payment

  • Urgency

  • No verified employer information

Correct action

Don't pay immediately. Verify the company and opportunity independently.


REAL-LIFE EXAMPLE 2 — PHISHING EMAIL

A remote assistant receives:

“Your Google account will be deleted today. Verify immediately.”

The email contains a login link.

Correct action

Don't panic or click immediately.

Instead:

Open Google through a trusted route → check account security → investigate the message.


REAL-LIFE EXAMPLE 3 — FAKE CLIENT

A freelancer receives a message:

“I want to hire you for ₦500,000. Before starting, buy a software license from this website and send me the activation code.”

Warning signs

  • Unusual purchasing request

  • Unknown website

  • Client controls the purchasing process

  • Request for an activation code

Correct action

Verify the client and software independently before making any purchase or sharing codes.


CLASSWORK

Activity 1 — Spot the Red Flags

Read this message:

URGENT JOB OFFER
You have been selected for a remote position paying $2,500 monthly. No interview is required. To activate your employee account, send ₦25,000 today. Contact us through WhatsApp immediately.

Identify at least six warning signs.


Activity 2 — Phishing Analysis

Analyze this email:

Subject: Your Account Will Be Closed

Dear Customer,
We detected unusual activity. Your account will be permanently closed within 30 minutes unless you verify your information below.

Click here to verify.

Identify:

  1. Urgency

  2. Threat

  3. Missing information

  4. Suspicious request

  5. Appropriate action


Activity 3 — Legitimate or Suspicious?

Classify each as:

Likely Legitimate / Suspicious / Requires Verification

  1. A job listed on a company's official careers page.

  2. A recruiter asks for your password.

  3. A company asks you to attend an interview before employment.

  4. Someone asks you to pay ₦30,000 to receive a job offer.

  5. A client sends a normal project brief through Upwork.

  6. A stranger asks you to receive money into your bank account and forward it.

  7. A company contacts you using its verified business email and provides a public job listing.


ASSIGNMENT 1 — SCAM DETECTION CHECKLIST

Create a Remote Job Scam Detection Checklist containing at least 20 questions.

Your checklist should cover:

  • Company verification

  • Recruiter verification

  • Job description

  • Salary

  • Payment requests

  • Communication

  • Website

  • Email

  • Interview

  • Personal information

  • Banking information

  • Files and links

  • Urgency

  • Independent verification


ASSIGNMENT 2 — PHISHING MESSAGE ANALYSIS

Find five examples of suspicious messages from your own experience or publicly available examples.

Do not share private information or active malicious links.

For each example, document:

  1. Type of message

  2. Claimed sender

  3. What the attacker wanted

  4. Red flags

  5. What the victim should do

  6. How the scam could have been prevented


PRACTICAL CHALLENGE

REMOTE JOB VERIFICATION PROJECT

You receive this opportunity:

REMOTE CUSTOMER SUPPORT ASSISTANT
Salary: $2,000/month
No experience required
Immediate employment
Send your passport, bank details and ₦50,000 registration fee to begin training.
Contact recruitment officer on WhatsApp.

Your task

Create a Job Verification Report.

Include:

1. Initial Assessment

Is the opportunity:

  • Safe?

  • Suspicious?

  • Requires verification?

2. Red Flags

Identify at least 10 warning signs.

3. Verification Plan

Explain exactly how you would verify:

  • Company

  • Recruiter

  • Job

  • Website

  • Email

  • Payment request

4. Information Protection

Identify information you should not provide at this stage.

5. Final Decision

Write a professional recommendation:

Proceed / Do Not Proceed / Verify Before Proceeding

Then explain why.


PROFESSIONAL RESPONSE PRACTICE

Write a response to the supposed recruiter:

“Thank you for the opportunity. Before proceeding, I would like to independently verify the company, job posting and recruitment process. Please provide the official company website, company email address and public job listing.”

This demonstrates an important remote-work skill:

Being professional does not mean being blindly trusting.


KEY LESSON

Don't let excitement, fear, urgency or greed make your security decisions for you.

Remember:

Pause → Check → Verify → Think → Act

For remote workers:

A real job does not become legitimate simply because the salary is attractive.

And:

Never give passwords, MFA codes or unnecessary sensitive information to someone simply because they claim to be a recruiter, client, manager or IT support person.


NEXT

DAY 38: PROTECTING CLIENT DATA AND CONFIDENTIAL INFORMATION

REMOTE WORK SKILLS TRAINING

MONTH 2 — WORKING PROFESSIONALLY

WEEK 8 — REMOTE WORK SECURITY & PROFESSIONALISM

DAY 38: PROTECTING CLIENT DATA AND CONFIDENTIAL INFORMATION

Objectives

By the end of this lesson, students should be able to:

  1. Explain client data and confidential information.

  2. Identify different types of sensitive business information.

  3. Understand why client information must be protected.

  4. Apply the principle of least privilege.

  5. Store and share files securely.

  6. Avoid accidental data exposure.

  7. Understand basic data-protection responsibilities.

  8. Handle client information on personal devices safely.

  9. Respond appropriately to data-security incidents.

  10. Demonstrate professional confidentiality when working remotely.


SOFTWARE / TOOLS

  • Google Drive — secure cloud file storage and controlled sharing.

  • Google Docs / Sheets — collaborative document management.

  • Microsoft OneDrive — business cloud storage.

  • Microsoft Word / Excel — document and data processing.

  • Google Workspace — organizational account and access management.

  • Microsoft 365 — business productivity and collaboration.

  • 7-Zip — file compression and encryption where appropriate.

  • Bitwarden / 1Password — secure credential management.

  • Windows Security — basic device protection.


1. WHAT IS CLIENT DATA?

Client data is information that belongs to, concerns, or is provided by a client or organization for business purposes.

Examples include:

  • Customer names

  • Email addresses

  • Phone numbers

  • Sales records

  • Employee information

  • Business documents

  • Financial records

  • Marketing plans

  • Company reports

  • Login credentials

  • Internal communications

  • Project files

As a remote worker, you may receive access to information that you do not personally own.

Important principle

Having access to information does not mean you have permission to use it however you want.


2. WHAT IS CONFIDENTIAL INFORMATION?

Confidential information is information that should only be accessed or shared by authorized people.

Examples:

  • Client passwords

  • Business strategies

  • Customer databases

  • Financial records

  • Unreleased products

  • Internal reports

  • Contracts

  • Employee records

  • Private company communications

  • Security information

Confidentiality means:

Only authorized people should have access to the information, and it should not be disclosed unnecessarily.


3. WHY CLIENT DATA PROTECTION MATTERS

Poor data handling can cause:

  • Financial loss

  • Identity theft

  • Fraud

  • Reputational damage

  • Legal problems

  • Loss of customers

  • Loss of trust

  • Business interruption

For a remote worker, one careless action can affect an entire organization.


4. DATA OWNERSHIP

A client may give you access to:

Customer_Database.xlsx

You can work on it because the client authorized you.

That does not mean:

  • You own the database.

  • You can copy it for personal use.

  • You can send it to your friend.

  • You can upload it to your personal cloud.

  • You can use it for another client.

  • You can publish it online.

Key principle

Access is not ownership.


5. TYPES OF INFORMATION TO PROTECT

1. Personal Information

Examples:

  • Name

  • Phone number

  • Email

  • Address

  • Identification information

2. Financial Information

Examples:

  • Invoices

  • Payment records

  • Financial reports

  • Account information

3. Business Information

Examples:

  • Business plans

  • Pricing

  • Customer lists

  • Marketing strategy

4. Authentication Information

Examples:

  • Passwords

  • MFA codes

  • API keys

  • Recovery codes

5. Technical Information

Examples:

  • Server credentials

  • Database connection information

  • Network configuration

  • Software secrets

6. Legal Information

Examples:

  • Contracts

  • Agreements

  • Legal correspondence


6. THE PRINCIPLE OF LEAST PRIVILEGE

Least privilege means giving a person only the access they need to perform their job.

Example

A graphic designer needs access to:

/Marketing/Designs

They may not need access to:

/Finance/Payroll

Giving unnecessary access increases risk.

Remote-work principle

Only access what you need, only use it for the assigned purpose, and only share it with authorized people.


7. NEED-TO-KNOW

The need-to-know principle means information should only be provided to people who genuinely need it for their work.

Example

A client gives you 1,000 customer records.

You are asked to prepare a sales report.

You may need:

  • Product

  • Quantity

  • Date

  • Sales amount

You may not need:

  • Customer passwords

  • Personal identification information

  • Unrelated private records

Don't collect or expose information simply because it is available.


8. DATA MINIMIZATION

Data minimization means using or collecting only the information necessary for the task.

Example

A customer survey analysis only requires:

  • Age range

  • Location

  • Product purchased

  • Feedback

There may be no reason to include:

  • Password

  • Bank details

  • National ID number

Key lesson

If you don't need the information, don't collect or expose it.


9. SECURE FILE STORAGE

Client files should be stored using approved and secure locations.

Examples:

  • Company Google Drive

  • Company OneDrive

  • Approved document-management system

Avoid casually storing business files in:

  • Random USB drives

  • Public computers

  • Personal cloud accounts

  • Unsecured phones

  • Shared family computers

unless the client/company has specifically authorized the method.


10. PERSONAL GOOGLE DRIVE VS CLIENT GOOGLE DRIVE

Imagine a client gives you access to:

companyname@gmail.com

and asks you to organize files.

Don't automatically download everything to your personal Google Drive.

Why?

Because:

  • The client owns the information.

  • The company may have retention policies.

  • Access may need to be controlled.

  • Personal accounts may not meet company security requirements.

Better approach

Work within the client's approved environment whenever possible.


11. FILE SHARING PERMISSIONS

Cloud platforms often provide permissions such as:

  • Viewer

  • Commenter

  • Editor

Choose the minimum permission required.

Example

If someone only needs to read a report:

Viewer

If they need to suggest changes:

Commenter

If they need to modify the document:

Editor

Don't give Editor access simply because it is convenient.


12. LINK SHARING

A common mistake is:

“Anyone with the link can edit.”

This can create unnecessary exposure.

Before sharing a file, check:

  • Who can access it?

  • Can they edit?

  • Can they download?

  • Is the link public?

  • Is an expiration date available?

  • Is the recipient authorized?

Better practice

Prefer specific-person sharing when appropriate.


13. FILE NAMING

Good file names make information easier to manage.

Poor:

reportfinalfinal2.xlsx

Better:

Monthly_Sales_Report_September_2026_V2.xlsx

A professional naming system can include:

Project + Document + Date + Version


14. AVOID DUPLICATE FILES

Imagine a team has:

  • Report.xlsx

  • Report_Final.xlsx

  • Report_Final2.xlsx

  • Report_Final_New.xlsx

  • Report_Final_New_Updated.xlsx

Nobody knows which one is the correct version.

This creates:

  • Confusion

  • Errors

  • Data loss

  • Incorrect reporting

Use a clear source of truth and version-control process.


15. EMAIL ATTACHMENTS

Before sending a client file:

Check:

  1. Is this the correct file?

  2. Is it the correct version?

  3. Is the recipient correct?

  4. Does the recipient need the entire file?

  5. Does the file contain unnecessary confidential information?

  6. Should I use a secure sharing link instead?

  7. Are permissions correctly configured?

A simple email mistake can expose sensitive information.


16. CHECK THE RECIPIENT

Suppose you need to send:

Customer_Database.xlsx

You type:

john@company.com

But accidentally select:

john@gmail.com

Before clicking Send:

STOP → Check recipient → Check attachment → Send


17. BCC AND CUSTOMER PRIVACY

If you're sending an email to many unrelated customers, placing all addresses in the To or CC field can expose their email addresses to one another.

Depending on the situation, BCC or a proper email-marketing platform may be more appropriate.

Important

BCC is useful for certain email situations, but it is not a replacement for proper customer-data management.


18. SCREENSHOTS CAN EXPOSE DATA

A remote worker may take a screenshot to ask for help.

The screenshot may accidentally contain:

  • Customer names

  • Email addresses

  • Phone numbers

  • Account numbers

  • Internal messages

  • Passwords

  • API keys

Before sharing a screenshot:

Check what is visible.

Remove or hide unnecessary sensitive information.


19. SCREEN SHARING SECURITY

During a Zoom or Google Meet call, you may share your screen.

Before clicking Share Screen, close or minimize:

  • Private email

  • Banking pages

  • Password manager

  • Client records

  • Personal messages

  • Private notifications

Better practice

Share:

Only the specific window/application required.

rather than your entire screen when possible.


20. PERSONAL DEVICES

Remote workers sometimes use personal:

  • Laptop

  • Smartphone

  • Tablet

for work.

If permitted, protect them with:

  • Screen lock

  • Strong device password/PIN

  • Current operating system

  • Security updates

  • Antivirus/security features

  • Encryption where available

  • Separate work accounts/profiles where appropriate


21. PUBLIC WI-FI

Public Wi-Fi can increase security risk, especially when handling sensitive work.

Examples:

  • Café Wi-Fi

  • Airport Wi-Fi

  • Hotel Wi-Fi

  • Public event Wi-Fi

When handling sensitive client information:

  • Prefer trusted networks.

  • Use appropriate security controls required by your organization.

  • Avoid accessing highly sensitive systems on unknown networks unless authorized and adequately protected.


22. USB DRIVES

USB devices can create risks such as:

  • Lost data

  • Malware

  • Unauthorized access

  • Accidental copying

Don't automatically copy an entire client database to a USB drive.

Ask:

Do I actually need this copy?


23. CLOUD STORAGE DOES NOT MEAN AUTOMATIC SECURITY

Google Drive and OneDrive provide security features, but users can still make mistakes.

For example:

A user accidentally changes a private document to “Anyone with the link.”

The platform didn't necessarily fail.

The sharing configuration caused the problem.

Key lesson

Security depends on both the technology and the person using it.


24. USING AI WITH CLIENT DATA

This is especially important after Day 35.

Before putting client information into an AI tool, ask:

  1. Is AI use allowed?

  2. Is the information confidential?

  3. Do I need the actual data?

  4. Can I remove identifying information?

  5. Is the tool approved?

  6. What happens to the information under the organization's policy?

Example

Instead of pasting:

500 customer records containing names, phone numbers and addresses

into an AI tool, consider whether you can work with:

anonymized sample data

or a summarized structure instead.


25. CONFIDENTIALITY AGREEMENTS

A client may require a worker to sign a:

Non-Disclosure Agreement (NDA).

An NDA is a legal agreement concerning confidential information and restrictions on disclosure.

If you sign one:

Read and understand your obligations.

Do not assume:

“It's just normal paperwork.”


26. DON'T DISCUSS CLIENT INFORMATION PUBLICLY

Avoid posting things such as:

“My client made ₦50 million this month!”

or:

“Look at the customer database I'm working on.”

Even if you are proud of the project, you may be exposing confidential information.


27. DON'T USE CLIENT DATA FOR YOUR PORTFOLIO WITHOUT PERMISSION

Suppose you created a beautiful dashboard for a company.

You want to show it on LinkedIn.

Before posting:

Ask whether you have permission.

If the information is confidential, create an anonymized or fictional version instead.

Better approach

Create:

Sample Sales Dashboard — Demo Data

rather than publishing real client records.


28. DATA RETENTION

Don't keep client information forever simply because you can.

When the project ends, follow the client's/company's instructions regarding:

  • Retention

  • Archiving

  • Deletion

  • Returning files

If there is no clear instruction, ask.


29. WHAT IF YOU SEND DATA TO THE WRONG PERSON?

Don't hide it.

Immediately:

  1. Stop further sharing.

  2. Notify the appropriate client/manager.

  3. Explain what happened.

  4. Identify what information was exposed.

  5. Follow the organization's incident-response procedure.

  6. Take corrective action if possible.

Important

Early reporting can reduce damage.

Trying to hide a security mistake can make the situation worse.


30. DATA SECURITY INCIDENT

A data-security incident is an event that may compromise the confidentiality, integrity or availability of information.

Examples:

  • Sending a file to the wrong person

  • Losing a work laptop

  • Sharing a private link publicly

  • Exposing a password

  • Downloading malware

  • Unauthorized account access


REAL-LIFE EXAMPLE 1 — VIRTUAL ASSISTANT

A VA receives a customer database containing:

  • Names

  • Phone numbers

  • Email addresses

The VA needs only the email addresses to prepare a mailing list.

Poor approach

Download and keep the entire database on a personal laptop indefinitely.

Better approach

Use only the required information and work within the client's approved system.


REAL-LIFE EXAMPLE 2 — DIGITAL MARKETER

A digital marketer wants to show a client's campaign results on LinkedIn.

The report contains:

  • Customer names

  • Revenue figures

  • Internal campaign information

Problem

Publishing it without permission could expose confidential business information.

Better approach

Obtain permission or create an anonymized demonstration using fictional/sample data.


REAL-LIFE EXAMPLE 3 — REMOTE WEB DEVELOPER

A developer accidentally uploads an API key to a public code repository.

Problem

Someone may be able to use the credential.

Immediate response

  • Report the incident.

  • Revoke/rotate the exposed credential.

  • Remove it from the repository as appropriate.

  • Check whether it was accessed.

  • Review the development process to prevent recurrence.

Key lesson

Secrets should not be stored directly in public source code.


CLASSWORK

Activity 1 — Identify Confidential Information

Classify each as:

Public / Internal / Confidential / Highly Sensitive

  1. Company public website.

  2. Customer database.

  3. Company password.

  4. Public Instagram post.

  5. Internal sales report.

  6. Employee payroll records.

  7. Public job advertisement.

  8. API key.

  9. Internal marketing strategy.

  10. Published company brochure.

Explain your reasoning.


Activity 2 — File-Sharing Decisions

For each situation, choose the most appropriate permission:

A.

A client wants to read a report.

Permission: Viewer

B.

A colleague needs to suggest corrections.

Permission: Commenter

C.

A colleague must update a spreadsheet.

Permission: Editor

Then explain why you should not automatically give everyone Editor access.


Activity 3 — Data Exposure

A remote worker accidentally emails a customer database to the wrong person.

Answer:

  1. What should they do first?

  2. Should they delete the sent email and pretend nothing happened?

  3. Who should they notify?

  4. What information should they report?

  5. How could the mistake have been prevented?


ASSIGNMENT 1 — CLIENT DATA PROTECTION PLAN

Create a document titled:

REMOTE CLIENT DATA PROTECTION PLAN

Include:

Section 1 — Data Types

Identify 10 types of client information that should be protected.

Section 2 — Storage

Explain where client files should be stored.

Section 3 — Access

Explain:

  • Least privilege

  • Need-to-know

  • File permissions

Section 4 — Sharing

Create five rules for safely sharing files.

Section 5 — Devices

Create a security checklist for a laptop and smartphone used for remote work.

Section 6 — Incident Response

Explain what you would do if confidential information was accidentally exposed.


ASSIGNMENT 2 — CONFIDENTIALITY SCENARIO

Answer this scenario:

You are a remote virtual assistant. Your client gives you a spreadsheet containing 2,000 customer records. You need only the customer's email addresses to create a newsletter list.

Explain:

  1. What information do you actually need?

  2. What information should you avoid unnecessarily exposing?

  3. Where should the file be stored?

  4. Who should have access?

  5. How should the final mailing list be shared?

  6. What should happen to unnecessary copies?


PRACTICAL CHALLENGE

SECURE CLIENT WORKSPACE PROJECT

Create a fictional business workspace for:

Nobigdeal Academy

Create this structure:

Nobigdeal Academy
│
├── 01_Admin
├── 02_Students
├── 03_Finance
├── 04_Marketing
├── 05_Training Materials
├── 06_Reports
├── 07_Client Projects
└── 08_Archive

Then define:

Access rules

Admin: Full access

Trainer: Training Materials + assigned student information

Marketing Assistant: Marketing

Finance Assistant: Finance

External Client: Only assigned project folder

Then answer:

  1. Why shouldn't every person have access to every folder?

  2. Which folders contain the most sensitive information?

  3. What permissions should external users receive?

  4. How would you review access regularly?


SECURITY CHECKLIST

Before handling client information, ask:

ACCESS

  • Do I have permission?

  • Do I actually need this information?

STORAGE

  • Where should it be stored?

  • Is the location approved?

SHARING

  • Who needs it?

  • What permission do they need?

DEVICE

  • Is my device secure?

  • Is it locked?

AI

  • Am I allowed to use AI with this information?

  • Can I anonymize it?

DELIVERY

  • Am I sending the correct file?

  • Is the recipient correct?

RETENTION

  • Do I still need this information?


KEY LESSON

Client information is a responsibility, not a personal possession.

The professional workflow is:

Access → Minimize → Store Securely → Control Access → Share Carefully → Review → Deliver → Retain/Delete According to Policy

Remember:

If you wouldn't want the information publicly exposed, don't treat it casually.


NEXT

DAY 39: PROFESSIONAL ETHICS AND DIGITAL FOOTPRINT

REMOTE WORK SKILLS TRAINING

MONTH 2 — WORKING PROFESSIONALLY

WEEK 8 — REMOTE WORK SECURITY & PROFESSIONALISM

DAY 40: MONTH 2 PRACTICAL ASSESSMENT

Objectives

By the end of this assessment, students should be able to:

  1. Demonstrate professional remote-work communication.

  2. Interpret client instructions correctly.

  3. Create and manage remote-work tasks.

  4. Demonstrate proper cloud file-sharing practices.

  5. Use AI responsibly in remote work.

  6. Identify phishing, fake jobs, and online scams.

  7. Protect client data and confidential information.

  8. Demonstrate good password and account-security practices.

  9. Apply professional ethics when handling remote work.

  10. Complete an integrated remote-work simulation professionally.


SECTION A — THEORY TEST

Answer all questions.

  1. What is remote work?

  2. What is the difference between a task and a project?

  3. Mention three tools used for remote team communication.

  4. What is cloud storage?

  5. Mention two benefits of using Google Drive or OneDrive.

  6. What does MFA mean?

  7. Why should remote workers avoid reusing passwords?

  8. What is phishing?

  9. Mention three signs of a fake remote job.

  10. What is confidential information?

  11. Explain the principle of least privilege.

  12. What is a professional progress update?

  13. Why should a remote worker clarify unclear instructions?

  14. What is a deadline?

  15. Mention two project-management tools.

  16. What is AI-assisted work?

  17. Why should AI-generated information be reviewed?

  18. What is a digital footprint?

  19. Mention two examples of unethical remote-work behavior.

  20. Why is trust important in remote work?

Marks: 20


SECTION B — PROFESSIONAL SCENARIOS

Scenario 1 — Unclear Client Instruction

A client sends:

“Please prepare the monthly report and send it to me tomorrow.”

You do not know which data to use, the required format, the recipient, or the exact submission time.

Task:

Write 5 professional clarification questions you would ask.


Scenario 2 — Progress Update

You were asked to organize 1,000 customer records.

You have completed 650 records. The remaining 350 records contain missing information.

Task:

Write a professional progress update to your manager.

Your message should include:

  • Completed

  • Current status

  • Problem

  • Next step

  • Expected completion


Scenario 3 — Phishing Message

You receive an email saying:

“Your remote-work account will be deleted today. Click this link immediately and verify your password.”

Task:

Identify at least 5 warning signs.

Explain what you would do before clicking anything.


Scenario 4 — Confidential Information

A friend asks you to send them a copy of your client's customer database because they want to “practice data analysis.”

Task:

Explain why you should not send the file and what you should do instead.


Scenario 5 — Client Feedback

A client says:

“The report looks good, but please change the date format, correct three figures and add a summary section.”

Task:

Write your professional response and create a revision checklist.


SECTION C — PRACTICAL ASSESSMENT

Practical 1: Client Instruction Analysis

Use the following instruction:

“Prepare a weekly sales report for ABC Business. Use the sales data in the shared Excel file. Clean obvious errors, calculate total sales, identify the five best-selling products, create a chart and save the final report as PDF. Submit it through Google Drive before 3:00 PM Friday.”

Student Tasks

  1. Identify the required deliverable.

  2. Identify the data source.

  3. Identify the deadline.

  4. Identify the required calculations.

  5. Identify the required visual.

  6. Identify possible dependencies.

  7. Create a task list.

  8. Assign priorities.

  9. Identify anything that may require clarification.

  10. Write a confirmation message to the client.


SECTION D — CLOUD COLLABORATION PRACTICAL

Task

Create a professional project folder in:

Google Drive or OneDrive

Use this structure:

ABC Business Project
│
├── 01_Admin
├── 02_Raw_Data
├── 03_Working_Files
├── 04_Reports
├── 05_Final_Deliverables
└── 06_Archive

Requirements

Students should:

  • Create the folders.

  • Add sample files.

  • Rename files professionally.

  • Apply appropriate permissions.

  • Demonstrate Viewer/Editor access.

  • Explain which files should not be publicly accessible.

  • Demonstrate version management.

  • Share the final folder appropriately.


SECTION E — AI PRACTICAL

Task: AI-Assisted Business Email

Use ChatGPT, Gemini or Microsoft Copilot to help draft an email informing a client that a report is ready.

The student must:

  1. Write the prompt.

  2. Generate the draft.

  3. Review the AI output.

  4. Correct errors.

  5. Improve the professional tone.

  6. Produce the final email.

Important

Students must not enter real client passwords, private customer information, confidential business information or other sensitive data into an AI tool unless authorized and appropriate.


SECTION F — SECURITY PRACTICAL

Task: Remote Worker Security Check

Using a non-sensitive personal or training account, check:

  1. Is MFA enabled?

  2. Is the password unique?

  3. Are recovery options available?

  4. Are suspicious sessions present?

  5. Are unnecessary connected applications present?

  6. Are account notifications enabled where appropriate?

  7. Is the device protected?

Students should create:

Remote Account Security Report

Account:
Security Check Date:

MFA:
Password Status:
Recovery Options:
Recent Login Review:
Connected Applications:
Security Alerts:
Problems Found:
Recommended Actions:

Do not submit actual passwords or security codes.


SECTION G — INTEGRATED REMOTE WORK PROJECT

PROJECT: REMOTE BUSINESS ASSISTANT SIMULATION

The student will act as a Remote Business Assistant for a fictional company.

Client Request

“We need help organizing this week's customer information, preparing a simple sales report and communicating the results to the manager. Please organize the files, review the data, prepare the report and send an update before the deadline.”

Student Workflow

The student must demonstrate:

1. Receive Instruction

Understand the client request.

↓

2. Clarify

Identify missing information.

↓

3. Plan

Create tasks and priorities.

↓

4. Organize

Create the cloud folder structure.

↓

5. Work

Process the provided training data.

↓

6. Communicate

Send progress updates.

↓

7. Use AI

Use AI appropriately for an approved part of the work.

↓

8. Review

Check accuracy and quality.

↓

9. Secure

Ensure files and information are properly protected.

↓

10. Deliver

Submit the final report.

↓

11. Confirm

Send a professional completion message.


SECTION H — FINAL CLIENT MESSAGE

At the end of the project, write a message similar to:

Subject: Weekly Sales Report Completed

Hello [Client Name],

The weekly sales report has been completed and uploaded to the agreed project folder.

Completed:

  • Reviewed and organized the sales data

  • Calculated total sales

  • Identified the top-selling products

  • Created the required chart

  • Prepared the final report

The final version is available in the Final Deliverables folder.

Please let me know if you would like any revisions.

Kind regards,
[Your Name]

Students should adapt the message rather than simply copy it.


MARKING SCHEME

Assessment AreaMarks
Theory20
Scenarios15
Client Instruction Analysis15
Cloud Collaboration10
AI Practical10
Security Practical10
Integrated Remote Work Project15
Final Client Communication5
TOTAL100

Pass Mark: 60%

Performance Guide

  • 90–100: Excellent

  • 80–89: Very Good

  • 70–79: Good

  • 60–69: Pass

  • Below 60: Needs Improvement


WEEKEND ASSIGNMENT 1 — REMOTE WORK SECURITY AUDIT

Create a Remote Worker Security Checklist covering:

  1. Passwords

  2. MFA

  3. Devices

  4. Email

  5. Cloud storage

  6. Client data

  7. Public Wi-Fi

  8. Phishing

  9. Fake jobs

  10. AI tools

  11. File sharing

  12. Account recovery

  13. Connected applications

  14. Digital footprint

  15. Incident reporting

Give each item a Yes/No/Needs Improvement status.


WEEKEND ASSIGNMENT 2 — COMPLETE REMOTE WORK SIMULATION

Choose one career:

  • Virtual Assistant

  • Data Entry Specialist

  • Graphic Designer

  • Digital Marketer

  • Web Developer

  • Data Analyst

  • Customer Support Representative

Create a fictional client project and demonstrate the complete workflow:

Instruction → Clarification → Task Plan → Work → Progress Update → Problem → Solution → Feedback → Revision → Final Delivery


MONTH 2 COMPLETION OUTCOME

By the end of Month 2, the learner should be able to operate as a professional remote worker, not simply someone who knows how to use remote-work tools.

The learner should be able to:

Understand → Plan → Communicate → Collaborate → Use Cloud Tools → Use AI → Protect Information → Handle Problems → Receive Feedback → Deliver Professionally

Key Lesson

Remote work is not just about working from home. It is about producing quality work, communicating clearly, protecting information and earning trust without someone physically watching you.


NEXT: DAY 41 — UNDERSTANDING REMOTE JOB DESCRIPTIONS

Comments

Popular posts from this blog

Week 4 Time, Task Management

Week 1 remote job

Week 9: Remote Job Search