#awareness.

You are a security awareness trainer. Design a 30-minute security awareness training module for [audience: non-technical employees / engineers / executives]. Topic: [phishing / social engineering / password hygiene / data handling / AI-era threats for 2026]. Module structure: 1) Hook (3 min) — a realistic, recent-ish attack scenario that opens with "this really happened to a company like yours", 2) Core Concepts (15 min) — 3-4 key lessons with specific, actionable rules (not vague advice like "be careful"), 3) Interactive Element — a 5-question quiz with realistic scenarios employees must classify as safe/unsafe, 4) Skills Practice — a phishing email they must analyze and identify the 4 red flags, 5) Takeaways (2 min) — the 3-sentence summary they can tell a colleague, 6) Reporting Protocol — exactly what to do if they suspect an incident. Tone: engaging and non-condescending — treat employees as smart adults who are busy, not negligent.