Cybersecurity Training for Virtual Assistants: What to Cover
Your virtual assistant handles sensitive accounts, tools, and data every day. Without proper cybersecurity training, even a well-intentioned VA can inadvertently expose your business to phishing attacks, data breaches, or account compromises.
See also: what is a virtual assistant, how to hire a virtual assistant, virtual assistant pricing.
Phishing Recognition
Teach your VA to identify:
- Suspicious sender addresses that mimic legitimate domains
- Urgent requests for passwords, payment information, or credentials
- Links that display one URL but redirect to another
- Unexpected file attachments, especially executable files
- Generic greetings instead of personalized ones
Practice: share examples of real phishing emails and walk through the warning signs.
Password Security
Core requirements:
- Use a password manager (1Password, LastPass, or Bitwarden) for all work credentials
- Generate unique, complex passwords for every account
- Never share passwords via email, chat, or text message
- Change passwords immediately if compromise is suspected
- Never reuse passwords across different accounts
Two-Factor Authentication
- Enable 2FA on all critical accounts (email, CRM, financial tools)
- Use authenticator apps (Google Authenticator, Authy) rather than SMS where possible
- Treat unexpected 2FA codes as a security alert — if a code arrives without a login attempt, report it immediately
Network and Device Security
- Require VPN use on any network other than a trusted home connection
- Prohibit work on public WiFi without VPN
- Mandate up-to-date operating system and antivirus software
- Require screen lock when stepping away from the computer
- Encourage full disk encryption
Incident Reporting
Define exactly what your VA should do if they suspect a security incident:
- Stop using the affected account or system immediately
- Notify you within 1 hour (or immediately for critical systems)
- Document what happened and what they observed
- Do not attempt to investigate or remediate independently
- Do not discuss the incident with anyone outside your organization
Ready to Hire?
Virtual Assistant VA connects you with trained VAs.