INSTRUCTIONAL DESIGN CASE STUDY
Think Before You Click: Spotting and Responding to Phishing Emails
A scenario-based cybersecurity awareness microlearning experience that helps employees identify phishing attempts, evaluate suspicious emails, and make safer decisions before clicking links or opening attachments.
AUDIENCE
Employees across all departments who use email and digital communication tools.
PLATFORM
Articulate
Rise 360
DURATION
5-7 Minute Microlearning
THE CHALLENGE
Phishing attacks remain one of the most common cybersecurity threats facing organizations. Employees are frequently targeted through deceptive emails designed to steal credentials, install malware, or gain access to sensitive information.
Traditional awareness training often focuses on information delivery rather than decision-making. I wanted to create a learning experience that allowed employees to practice identifying phishing attempts and applying safe cybersecurity behaviors in realistic workplace situations.
The goal wasn't to teach cybersecurity terminology—it was to help learners pause, evaluate, and make safer decisions before taking action.
THE SOLUTION
I designed a scenario-based cybersecurity awareness module that places learners in realistic workplace situations where they must evaluate suspicious emails and determine the safest course of action.
Through interactive decision points and immediate feedback, learners practice recognizing common phishing indicators and applying cybersecurity best practices.
Verify the sender
Inspect links and attachments
Recognize urgency tactics
1
Report suspicious messages
ANALYSIS
Identified a common organizational risk: employees are frequently targeted by phishing attempts but may not recognize warning signs before interacting with suspicious messages.
The learning need was behavioral rather than technical. Employees needed practice evaluating emails and applying safe decision-making processes.
DESIGN
Instead of relying on information-heavy cybersecurity content, I used scenario-based learning to create opportunities for practice and reflection.
The learning experience gradually increases in complexity through realistic phishing examples that mirror common workplace threats.
DEVELOPEMENT
EVALUATION
Success would be measured through scenario performance, completion data, learner feedback, and organizational phishing simulation results to determine whether learners are applying safer cybersecurity practices.
LEARNING STRATEGIES
Scaffolding: Learners practice evaluating suspicious emails rather than simply reading about phishing threats.
Authentic Context: Scenarios replicate common workplace phishing attempts including password resets, invoice scams, and executive impersonation attacks.
Decision-Based Learning: Learners evaluate options and select the safest response before receiving immediate feedback.
Performance Support: Visual resources and job aids reinforce key concepts and support real-world application.
Key Features
Scenario-based learning
Realistic email simulations
Immediate feedback
Cybersecurity awareness training
Performance support resources
Microlearning format
Mobile-friendly design
Learning Experience Design Decisions
This project was intentionally designed as a scenario-based microlearning experience because cybersecurity awareness is most effective when learners practice making decisions in context.
Rather than presenting phishing indicators as a checklist, learners encounter realistic workplace situations that require evaluation and judgment. Immediate feedback reinforces correct behaviors while helping learners understand why alternative actions may increase organizational risk.
The infographic and job aid were included as performance support tools to encourage transfer of learning beyond the course environment.
SKILLS DEMONSTRATED
-
Instructional Design
-
Learning Experience Design (LXD)
-
Scenario-Based Learning
-
Cybersecurity Awareness Training
-
Adult Learning Principles
-
Infographic Design
-
Performance Support Design
-
Visual Communication
-
Articulate Rise 360
-
Microlearning Design
-
Interaction Design
-
Decision-Based Assessment