Training on Digital Security for Human Rights Defenders

Human rights defenders across Africa and the Middle East increasingly rely on digital tools to document abuses, communicate with communities, manage sensitive information, and advocate for justice. While technology has amplified their impact, it has also exposed them to serious risks. Cyberattacks, surveillance, phishing scams, device seizures, and online harassment have become common tactics used to silence voices and disrupt important work.

Many organizations and individuals are not fully prepared to protect themselves in this rapidly evolving digital environment. Weak passwords, unsecured devices, unsafe communication platforms, and lack of awareness about cyber threats can easily lead to data leaks, compromised investigations, or even physical harm. The emotional stress of constantly worrying about digital safety also affects productivity and well-being.

This course is designed to empower human rights defenders, NGOs, government partners, and corporate social responsibility teams with practical digital security knowledge. Participants will learn how to secure devices, protect online communications, manage sensitive data safely, and respond effectively to cyber incidents. Through real-life scenarios from the region, hands-on exercises, and case studies, the course builds confidence to operate safely while continuing impactful human rights work.

Duration

10 Days 

Who Should Attend

• Human rights defenders and activists

• NGOs and civil society organizations

• Journalists and investigative teams

• Government agencies working with civil society

• Corporate compliance and CSR teams

• IT and digital security officers

Individual Impact

• Gain practical cybersecurity skills

• Improve personal and organizational safety

• Reduce risk of data breaches and surveillance

• Build confidence in using digital tools securely

• Strengthen crisis response capabilities

Organizational Impact

• Protect sensitive information and sources

• Improve operational resilience

• Enhance trust with communities and partners

• Reduce cyber risks and disruptions

• Strengthen digital governance practices

By the end of this course, participants will be able to:

• Understand digital threats facing human rights work

• Secure devices and online accounts

• Protect communications and data

• Identify and prevent cyberattacks

• Respond to security incidents effectively

• Build long-term digital security strategies

Module 1: Digital Threat Landscape for Human Rights Defenders

• Common cyber risks in the region

• Surveillance and hacking tactics

• Impact on safety and operations

• Risk assessment basics
  Exercise: Identify digital threats
  Case Study: NGO targeted by cyberattack

Module 2: Securing Devices and Operating Systems

• Device encryption

• Software updates and patches

• Secure configurations

• Malware protection
  Practical: Secure a device step-by-step
  Case Study: Breach through unsecured laptop

Module 3: Passwords and Account Protection

• Strong password practices

• Password managers

• Two-factor authentication

• Account recovery security
  Exercise: Create secure login systems
  Case Study: Phishing attack compromise

Module 4: Secure Communication Tools

• Encrypted messaging platforms

• Secure email practices

• Avoiding interception

• Communication policies
  Practical: Set up encrypted communication
  Case Study: Secure whistleblower communications

Module 5: Data Protection and Safe Storage

• Data classification

• Secure cloud storage

• Backup strategies

• Access control
  Exercise: Build a data protection plan
  Case Study: Preventing sensitive data leaks

Module 6: Recognizing and Preventing Cyberattacks

• Phishing and social engineering

• Malware threats

• Unsafe websites and downloads

• Staff awareness training
  Practical: Spot fake phishing attempts
  Case Study: NGO email breach

Module 7: Online Safety and Digital Footprint

• Social media privacy

• Protecting identity online

• Managing public information

• Avoiding tracking
  Exercise: Secure social media profiles
  Case Study: Online harassment campaign

Module 8: Incident Response and Crisis Management

• Detecting security breaches

• Immediate response actions

• Reporting procedures

• Recovery steps
  Practical: Simulated cyber incident response
  Case Study: Data breach recovery

Module 9: Organizational Digital Security Policies

• Creating security guidelines

• Staff training programs

• Risk management frameworks

• Compliance considerations
  Exercise: Draft security policy
  Case Study: NGO security policy implementation

Module 10: Building a Long-Term Digital Security Culture

• Continuous improvement

• Security audits

• Budgeting for cybersecurity

• Future digital threats
  Capstone Exercise: Develop a digital security strategy
  Case Study: Sustainable security program