Learn to spot unusual or suspicious activity on accounts and devices, recognise red flags like phishing or unexpected downloads, and respond appropriately to protect company systems.