HR and recruitment pack

Complete plan

The reflexes of HR, recruitment and payroll teams: the candidate who is not who they claim, the employee who changes bank details by email, personal data, access requests and access to give back.

  • 10 min
  • 5 modules
  • 15-question check
  • English · Français
  • Attestation

You will be able to

  • Open a CV received as an attachment or link without putting your computer at risk
  • Recognise the two variants of salary-diversion fraud: a fake employee emailing, and a hijacked real HR-portal account
  • Recognise personal data, direct or indirect
  • Recognise a data subject request without magic words
  • Understand why unused access is a risk (stolen account, former employee)

Programme

5 modules · 10 min
  1. The perfect candidate 2 min
    • Open a CV received as an attachment or link without putting your computer at risk
    • Respond to doubt in a remote interview with a live identity check, without rejecting the candidate on a hunch
    • Check the shipping address and the references before opening access, in the same way for every finalist
  2. An employee changes bank details by email 2 min
    • Recognise the two variants of salary-diversion fraud: a fake employee emailing, and a hijacked real HR-portal account
    • Confirm any bank-detail change through a known channel before the next payroll, and delay its effect if doubt remains
    • Tell the employee on their usual contact details every time bank details change
  3. Personal data, or not? 2 min
    • Recognise personal data, direct or indirect
    • Recognise sensitive data (GDPR Article 9)
    • When in doubt, treat it as personal data and ask the DPO
  4. “Send me everything you have on me” 2 min
    • Recognise a data subject request without magic words
    • Know the one-month deadline
    • Forward it the same day to the DPO, without answering, filtering or deleting anything yourself
  5. Access you no longer need 2 min
    • Understand why unused access is a risk (stolen account, former employee)
    • Report access you no longer need when you change role or project
    • Answer an access review honestly, and leave without keeping copies
  6. Knowledge check

    15 questions, pass mark 80 %. Explanations after each answer; you can try again.

  7. Attestation

    One per person, with the date, the score and the frameworks covered — anyone can check it online with its code.

Version 1 · updated October 5, 2026