Cyber Security training that gets your team CQC-ready
- CQC-aligned, mapped to the Care Certificate framework
- Completed in the hub in over 60 languages
- A certificate for every staff member, for your CQC evidence
- A wrong answer triggers a follow-up lesson, so gaps are closed
No subscription needed. Bulk discounts from 10+ licences.
From £25.99 per staff member, one-off. No subscription needed.
Trusted by UK care providers
Specialists in the technology behind it all
The same technology behind the world's best products powers CareStream, so your team's cyber security training stays accurate, always up to date with the latest guidance, and is delivered in over 60 languages.

Understanding Cyber Security Risks
Cyber security means protecting our computer systems and the personal information we hold from theft, damage or unauthorised access. your service holds sensitive personal data about the people we support, including health information about children in some cases.
A security breach could harm the people we support and result in heavy fines from the Information Commissioner's Office. Common threats include viruses, phishing emails, hacking attempts and theft of devices or storage media.
What is the minimum number of characters required for a password under our policy?
In the hub, a wrong answer sends the staff member a short follow-up lesson and a fresh question on the same point. They close the gap before they can finish the module, and every attempt is recorded for your CQC evidence.
That is how the training works. Give your whole team the full Cyber Security module.
Avg. Duration
About 35 minutes
Certificate
For every staff member
Available Languages (60+)
Course Published by

A clear, practical grounding in cyber security.
This training covers how to protect our computer systems, data and the people we support from cyber threats. You will learn our security procedures, how to recognise risks like phishing and viruses, and your responsibilities under data protection law. Cyber security is everyone's responsibility and protects both your service users and our organisation.
By the end, your staff will be able to:
- Identify common cyber security threats including phishing, viruses and unauthorised access
- Apply our password and access control procedures correctly in daily work
- Explain your responsibilities under data protection law when using computer systems
- Recognise security breaches and know the correct reporting procedure
- Describe safe practices for using email, internet and external storage devices
A closer look at the cyber security module.
The module is built in short, practical sections. Each one teaches a part of the topic, then applies it to a real care scenario and checks understanding before moving on.
Understanding Cyber Security Risks
Cyber security means protecting our computer systems and the personal information we hold from theft, damage or unauthorised access. your service holds sensitive personal data about the people we support, including health information about children in some cases. A security breach could harm the people we support and result in heavy fines from the Information Commissioner's Office. Common threats include viruses, phishing emails, hacking attempts and theft of devices or storage media.

Password Security and Access Control
You must use passwords at all times and change them regularly. Passwords must be at least eight characters including numbers, letters, both upper and lower case, and at least one symbol. Never choose obvious passwords like names or dates. Keep all passwords completely confidential and never share them with colleagues or anyone outside your service. Always close password protected sites when finished and switch off computers. Never leave a computer open and unattended.

Levels of Access and Authorisation
You are only permitted to access parts of the computer system you need for your normal duties. Your line manager and the data security officer decide your access level. This ensures consistency and protects sensitive information. If you need temporary access to something outside your normal level, this requires written authorisation from your line manager, the data security officer and where appropriate the data protection officer. A written record must be kept and the temporary access cancelled when no longer needed.

Safe Use of Email and Internet
All incoming emails are monitored and scanned for viruses before reaching you. You may access the internet but certain sites are blocked. Attempting to bypass these restrictions is a disciplinary offence. Never send abusive, rude or defamatory messages about people or organisations via email or post them on websites. Do not use the system for private work or playing games. Be cautious with unexpected emails, especially those with attachments or links, even if they appear to come from someone you know.

External Software and Storage Devices
All software used in your service must be formally authorised by the data security officer. No external software may be used without authorisation from both the data security officer and your line manager. CDs and DVDs from external sources must be checked for viruses by the IT department before use. Keep all CDs and DVDs in a secure place. The Information Commissioner's Office has imposed heavy fines on organisations after loss of CDs and DVDs containing sensitive personal data.

Recognising and Reporting Security Breaches
Misuse of computers is a serious disciplinary offence and may be gross misconduct. Examples include fraud, system sabotage, introducing viruses, using unauthorised software, obtaining unauthorised access, breaches of data protection law, and hacking. All security breaches must be reported to the relevant director or managing director. Serious breaches must be reported to the Information Commissioner's Office within 72 hours. If you suspect a colleague is abusing the computer system, you may speak in confidence to the HR manager.

The things your team must remember.
- Keep all passwords confidential, use strong passwords with at least eight characters including numbers, letters, upper and lower case and symbols, and never share them with anyone
- Only access parts of the computer system you need for your normal duties and never try to bypass access restrictions
- All external software, CDs, DVDs and USB sticks must be checked by IT before use to prevent viruses
- Report all security breaches immediately to your line manager or the relevant director, and serious breaches must reach the ICO within 72 hours
- Never leave computers unattended while logged in, always close password protected sites when finished and switch off computers
- Be alert to phishing emails and suspicious messages, and report them rather than clicking links or providing information
Not a slideshow once a year. Training that sticks.
CareStream delivers cyber security training in the hub your team already uses, grounded in best practice and your own policies, so it fits your care setting and not a generic template.
Short teaching sections and a real care scenario, then an assessment that checks understanding.
Staff complete it in over 60 languages, while your records stay in English.
A wrong answer triggers a short follow-up lesson and a fresh question, so the gap is closed.
Automatic reminders at 90, 30 and 7 days, with a live compliance dashboard.
From your dashboard to your team, in the CareStream hub.
Training is delivered in the hub each staff member logs into. You allocate the modules, they complete them in their own language, and you get the completion records and certificates for your CQC evidence, with any gaps closed by automatic follow up training.
Assign Cyber Security to each staff member in seconds. No course builder and no setup for each person.
Staff work through the module on any device, in over 60 languages, teaching then checking understanding. A wrong answer sends a short follow up lesson.
See live completion status and a certificate for every person, ready as evidence for CQC.
Any step, in their language, in one tap.
Care teams are diverse and training should not leave anyone behind. On any lesson or question, a staff member taps the language button and the whole step flips into the language they think in. They understand it properly, and your records stay in English.
- One tap flips any lesson or question into their language, instantly.
- Over 60 languages, with no setup and no separate versions to manage.
- Completions and certificates stay in English for your CQC evidence.
Try the language buttons in the preview above.
Built for real learning, not box ticking
Every CareStream course goes further than a lesson and a quiz. These features come as standard on every course, giving your staff a richer way to learn and giving you the evidence to prove it.

Every course is built on recognised UK guidance and cites its sources, from NICE and Skills for Care to the NHS and the legislation itself.
A plain English glossary of the technical terms in each course. A simple way to support every learner, including staff with English as a second language.
A quick knowledge check before the lesson is compared with the final assessment, so every certificate comes with evidence of how much the course actually taught.

After passing, staff record what they will do differently in their day to day work. Their reflection is saved to their training record and shown with their certificate.

A printable one page takeaway of the outcomes, key points and key terms. Perfect for staff files, supervision conversations and the staff room wall.

A printable checklist for managers to confirm skills in practice, with a sign off section. It completes the picture beyond the knowledge assessment.
Wrong answers become lessons, not failures
Most e learning marks an answer wrong and moves on. CareStream does not. Every wrong answer triggers an automatic follow up loop that teaches the point again and rechecks it, so no knowledge gap is left behind.

A wrong answer immediately opens a short lesson explaining the point, so the gap is closed there and then.
A fresh question on the same point checks the lesson has landed. The loop repeats until it has.
Staff move on to the next module and their certificate once they genuinely know the answer, not just after one lucky guess.
Why choose CareStream?
Training built for the care sector, delivered the way busy teams actually learn.
- 90+ care-specific training courses
- Bitesize, engaging lessons your staff actually finish
- Mapped to the Care Certificate & CQC standards
- Available in 60+ languages
- Instant certificate on completion
- Flexible learning, anytime, on any device
- Content kept up to date with UK care regulations
- Time to complete: ~35 min

Frequently asked questions.
Is Cyber Security training mandatory in care settings?
How often should staff complete Cyber Security training?
Can CareStream deliver Cyber Security training in other languages?
Does the training include an assessment?
More training your team may need
More mandatory and role-specific training CareStream delivers to your team, in the hub, in any language. Add any of these to your basket.
Annual CertificateGDPR / Data Protection
This training covers how we protect personal information at our home in line with GDPR and our Data Protection policies. You will learn about lawful processing, consent, data security, handling breaches, and responding to access requests. Understanding these rules protects residents, staff, and our service from harm and legal issues.
Bulk discounts from 10+ licences
Annual CertificateDocumentation and Record Keeping
This training covers how we keep accurate, secure records in our home, including our digital record keeping system. Good record keeping protects the people we support, helps us provide better care, and meets our legal duties under data protection law and CQC standards.
Bulk discounts from 10+ licences
Annual CertificateNational Data Opt-out
This training explains the National Data Opt-out system and how it affects the way we handle personal information about the people we support. You will learn what the opt-out means, how to check if someone has registered, and how to respect their choices when sharing information. This protects people's rights and keeps our service compliant with data protection law.
Bulk discounts from 10+ licences
Annual CertificateICO Training
This training covers your responsibilities under UK data protection law when handling personal information about the people we support, colleagues, and others. You will learn how to protect privacy, handle information correctly, and respond to data breaches in line with our service's policies and ICO requirements.
Bulk discounts from 10+ licences
Annual CertificatePerson-Centred Care Planning
This training covers how to create and maintain care plans that truly reflect each resident's individual needs, preferences, and goals. You will learn how to involve residents and their families in planning care, and how to ensure care plans guide daily practice in a way that respects dignity, choice, and independence.
Bulk discounts from 10+ licences
Annual CertificateActivities, Wellbeing and Meaningful Occupation
This training helps you support residents to live fulfilling lives through meaningful activities and occupation. You will learn how to recognise individual interests, promote wellbeing, and create opportunities for engagement that respect each person's abilities and preferences. This matters because meaningful activity is central to quality of life and is a CQC fundamental standard.
Bulk discounts from 10+ licences
Give your team cyber security training that actually sticks.
Add it to your basket, allocate it in seconds, and let the evidence build itself.
Compared
Three ways to train a care team.
These modules are written and kept current by us, so your managers do not have to write or maintain them. We have compared what each approach does rather than naming providers, because products change and this should still be true next year.
| CareStream | A generic e-learning library | A trainer you book | |
|---|---|---|---|
| Try a real lesson and a real question before you buy | |||
| Learning outcomes and time to complete stated up front | |||
| Written lesson sections, each with its own illustration | |||
| Interactive exercises after the lesson that teaches them, in every module | |||
| Assessment in every module, with the key points to revisit | |||
| Taken in any of sixty plus languages | |||
| A wrong answer triggers a follow-up lesson, not just a re-sit | |||
| Practical sign-off by a manager where the subject needs it | |||
| Completion files itself into your training matrix and evidence pack | |||
| Bought one module at a time, with no annual contract |
Generic libraries are often cheaper per learner. They teach a national standard rather than being built, updated and evidenced around the way a CQC-registered service is actually inspected.
Care policies
Every module is written from a policy
If the policy behind it is out of date, the training inherits that. Sixty six policies written for your service, checked against current law and read by a person before they carry your name, from £39.




