62%

of breaches involved the human element. Verizon Data Breach Investigations Report 2026.

Rocheston Certified Cybersecurity Specialist (RCCS) certification

Most Breaches Start With People.

One click on the wrong link can undo every firewall you own. RCCS turns everyday staff into your first line of defence, with no technical background needed.

HRD Corp claimableYayasan Peneraju: may be eligibleNo technical background needed

Exam

RCT-99

Course

3 days

Course fee

RM4,500

Exam fee

Included

Next intake

23 Mar 2027

Quick answer

What is RCCS?

The Rocheston Certified Cybersecurity Specialist (RCCS) is a cybersecurity awareness certification for everyday users. It teaches staff to spot phishing, scams and social engineering, protect their accounts, devices and data, and report incidents quickly. There are no prerequisites, and the exam is 50 scenario-based questions.

Exam facts verified against rocheston.com on 22 Oct 2026

FOR

Employees at every level: finance, HR, sales, executives, help desk

BEST FOR

Organisations building a security-aware workforce

SKIP IF

You want a technical career. Start with ISC2 CC or ECSS

01

The Credential

What you study, practise and sit to earn it.

Pass Rocheston exam RCT-99 and you hold the Rocheston Certified Cybersecurity Specialist credential. It proves you can recognise and respond to the everyday threats that cause most breaches.

COURSE

3 days, 24 modules

HANDS-ON

10 labs, 12 real-life scenarios

EXAM

RCT-99, 2 hrs

CREDENTIAL

Rocheston RCCS

Awarded by

Rocheston

Level

Awareness, for every employee

Prerequisites

None, no technical background

Exam

50 scenario-based questions

Delivery

Online, proctored via Rocheston Ramsys

Platform

Rocheston Cyberclass access

02

Decide in 60 Seconds

Four first steps people compare.

If you want to

Choose

Why

Build cyber awareness across non-technical staff

→

RCCS

Practical, scenario-based training for everyday users

Start a career in cybersecurity

→

ISC2 CC

Entry-level credential from the body behind CISSP

Try technical defence, hacking and forensics

→

ECSS

One beginner exam across three disciplines

Understand information security management standards

→

ISO/IEC 27001 Foundation

Two-day grounding in ISMS concepts

Is RCCS right for you or your team?
0/4

Tick what applies. 3 or 4: RCCS is the right fit. Fewer: if you want a technical career, start with ISC2 CC or ECSS.

03

What the Exam Covers

What the RCT-99 exam tests, through 50 real-life scenarios.

50 scenario-based questionsPass mark: 70%

Spot

Recognise the Threat

  • Phishing, smishing, vishing and QR code scams
  • Social engineering and impersonation
  • Malware, ransomware, AI and deepfake scams

Prevent

Protect Yourself

  • Passwords, password managers and MFA
  • Safe browsing, public Wi-Fi and device security
  • Data privacy, cloud sharing and social media

React

Respond and Report

  • What to report, and when
  • Basic incident response for non-technical users
  • Security policies, acceptable use and compliance

Source: Rocheston RCCS course page. Rocheston does not publish domain weightings; topics grouped by Trainocate.

04

What the Course Covers

24 modules in five themes, plus labs and real-life scenarios.

Three days of instructor-led training on Rocheston’s RCCS programme, with Cyberclass access. Every theme ends with practice, so the habits stick after the course.

5 modules

The Threat Landscape

  • Cybersecurity Awareness Fundamentals
  • Why Humans Are Targeted
  • Common Cyber Threats for Everyday Users
  • Malware and Ransomware Awareness
  • AI, Deepfakes and Modern Scam Awareness

4 modules

Spotting Scams

  • Phishing Email Recognition
  • Smishing, Vishing and QR Code Scams
  • Social Engineering and Impersonation
  • Email Attachment and Link Safety

6 modules

Protecting Accounts and Devices

  • Password Hygiene and Password Managers
  • Multifactor Authentication
  • Safe Web Browsing
  • Public Wi-Fi and VPN Basics
  • Device Security for Laptops and Phones
  • Software Updates and Patch Awareness

4 modules

Protecting Data

  • Data Privacy and Sensitive Information Handling
  • Cloud Storage and File-Sharing Safety
  • Social Media Safety and Oversharing Risks
  • Remote Work and Home Network Safety

5 modules

Workplace Security and Response

  • Insider Risk and Workplace Security Behaviour
  • Incident Reporting: What to Report and When
  • Basic Incident Response for Non-Technical Users
  • Security Policies, Acceptable Use and Compliance Basics
  • Final Scenario Review and Exam Preparation

10

hands-on labs and 12 real-life scenarios, so every learner practises what they will face at work.

Phishing Email InvestigationFake Login Page DetectionPassword Manager SetupMFA Setup and Recovery CodesSocial Engineering Role-PlaySafe Browsing DecisionsPublic Wi-Fi Safety ExerciseData Classification ExerciseIncident Reporting DrillFinal Cyber Hygiene Challenge

05

Why Now

Where breaches start, what is hitting Malaysia, and why train with us.

62%

of breaches involved the human element

Verizon Data Breach Investigations Report 2026

91%

of fraud cases reported in Malaysia in Q1 2026 were phishing (90.6%)

MyCERT Cyber Incident Summary Report, Q1 2026

16%

rise in cyber incidents reported to MyCERT in Q1 2026, to 2,188 cases

MyCERT Cyber Incident Summary Report, Q1 2026

6 hrs

Six Hours to Report. Who’s Watching the Alerts?

Malaysia’s Cyber Security Act 2024 (Act 854) came into force on 26 August 2024. Critical infrastructure entities must report a cyber security incident within six hours, and managed SOC monitoring services now need a licence. Many of those incidents start with one person and one click.

NACSA; Cyber Security (Notification of Cyber Security Incident) Regulations 2024

Rocheston partner

Delivering Rocheston’s official RCCS course with Cyberclass access

Exam included

One fee covers training and your exam

HRD Corp registered

This course is HRD Corp claimable

KL or online

Instructor-led in class or live online

06

The Cost, All In

Every figure per person, in ringgit.

Fees

Three-day courseIncluded

RCCS exam (RCT-99)Included

Funding

HRD Corp claim for employersClaimable

Yayasan Peneraju financing (Bumiputera)May be eligible

Course with exam

RM4,500

Dates

Where

Fee

Tue 23 to Thu 25 Mar 2027

Kuala Lumpur or online

RM4,500 incl. exam

Mon 10 to Wed 12 May 2027

Kuala Lumpur or online

RM4,500 incl. exam

Wed 18 to Fri 20 Aug 2027

Kuala Lumpur or online

RM4,500 incl. exam

Mon 8 to Wed 10 Nov 2027

Kuala Lumpur or online

RM4,500 incl. exam

Training a team? We run private intakes on dates that suit your organisation, with HRD Corp claims handled alongside you.

07

Exam and Renewal

What exam day looks like, and what happens after you pass.

Certification

Rocheston Certified Cybersecurity Specialist (RCCS)

Exam code

RCT-99

Questions

50 scenario-based multiple choice

Duration

2 hours

Passing score

70%

Delivery

Online, proctored via Rocheston Ramsys

Prerequisites

None

Exam fee

Included in the course fee

AFTER YOU PASS

Certificate issued

Rocheston issues your RCCS certificate when you pass. It does not publish a renewal requirement, so ask us for current terms.

FOR TEAMS

Certify every department

Rocheston designed RCCS for whole organisations, from finance and HR to executives, sales and help desk staff.

FAQ

Questions People Ask

What is the Rocheston RCCS certification?

The Rocheston Certified Cybersecurity Specialist (RCCS) is a cybersecurity awareness certification for everyday users. It teaches people to spot phishing, scams and social engineering, protect accounts, devices and data, and report incidents.

No. Rocheston built RCCS for everyone and lists no prerequisites, so it suits employees in any role.

At Trainocate Malaysia the three-day course is RM4,500 per person, and the exam is included. The course is HRD Corp claimable, and Malaysian Bumiputera learners may be eligible for Yayasan Peneraju funding.

Exam RCT-99 has 50 scenario-based multiple-choice questions in two hours, and you need 70% to pass. It is taken online and proctored through Rocheston Ramsys.

Yes. Rocheston designed RCCS for organisations to train every department, including finance, HR, executives, sales and help desk staff. We run private intakes for teams.

RCCS builds awareness for everyday work. For a technical career, start with ISC2 CC or ECSS, then move on to RCCE or RSOC.

Rocheston does not publish a renewal requirement for RCCS. Ask us and we will confirm the current terms before you enrol.

Turn Staff Into Defenders

Pick an intake or ask about a private team session. An advisor confirms seats, HRD Corp claims and Yayasan Peneraju eligibility with you.

  • Next intake: 23 to 25 Mar 2027
  • RM4,500, exam included

Sources

  1. Rocheston: RCCS cybersecurity awareness certification
  2. Rocheston: RCCS brochure (PDF)
  3. Rocheston: RSOC
  4. Rocheston: Certification exam versions
  5. Verizon: 2026 DBIR executive summary (PDF)
  6. Verizon: 2026 DBIR news release
  7. Trainocate: RCCS course page
  8. CyberSecurity Malaysia: Q1 2026 Cyber Incident Summary Report
  9. NACSA: Cyber Security Act 2024 (Act 854)
  10. MAICSA: Act 854 regulations summary