Recognizing the growing importance of cybersecurity in today’s digital landscape, the Professional Engineering Training Division (PETD) of the UP National Engineering Center (NEC) successfully conducted its first Cybersecurity Training Program from 28 to 30 July 2026, 9:00 am to 5:00 pm at workshop Room B, UP National Engineering Center, bringing together professionals from government agencies, educational institutions, and the private sector for a three-day learning experience focused on strengthening cybersecurity awareness and practical risk management. The training featured lectures, interactive workshops, discussions, and hands-on activities designed to make cybersecurity concepts applicable to everyday workplace operations rather than purely technical discussions.
The three-day training brought together participants from various sectors, including the Bases Conversion and Development Authority (BCDA), Bataan High School for the Arts, Department of Transportation – Philippine Railways Project Implementation Office (DOTr-PPRI), Eulogio Amang Rodriguez Institute of Science and Technology (EARIST), Our Lady of Fatima University, Prime Energy Resource Development, UP National Engineering Center (UP NEC), and the UP Training Center for Applied Geodesy and Photogrammetry (UP TCAGP). The diverse group of participants enriched the discussions by sharing their experiences and perspectives, highlighting that cybersecurity is relevant to every organization, regardless of industry.
The training was conducted by Dr. Philip Christian C. Zuñiga, a faculty member of the Department of Computer Science, University of the Philippines Diliman, Senior Member of the Computer Security Laboratory, and lead instructor for Introduction to Computer Security. His expertise in computer security, cybersecurity education, and data protection provided participants with practical insights into addressing today’s evolving cyber threats.
The first day established a strong foundation by introducing the core concepts of workplace cybersecurity. Participants explored key principles such as information assets, threats, vulnerabilities, risks, incidents, and security controls, gaining a clearer understanding of how these elements work together to protect organizational information. Discussions emphasized that effective cybersecurity begins with awareness and that every employee has a role in safeguarding the organization’s digital and physical assets.
Building on these fundamentals, the second day focused on office security and social engineering, where participants learned how cyber threats often exploit human behavior rather than technological weaknesses. Through practical examples and collaborative exercises, they examined common workplace risks, analyzed how vulnerabilities develop within organizational processes, and discussed appropriate controls that can help prevent security incidents before they occur. The sessions encouraged participants to think critically about risk management and apply cybersecurity principles to their respective work environments.
The final day centered on incident reporting, data privacy, and cybersecurity frameworks, reinforcing the importance of recognizing and responding to security incidents promptly. Participants learned how to identify indicators of potential cybersecurity and data privacy incidents, distinguish routine operational issues from reportable incidents, preserve relevant evidence, and follow appropriate reporting procedures. The discussions underscored that timely reporting and coordinated response play a critical role in minimizing the impact of cybersecurity threats on organizations.
Throughout the three-day program, participants actively engaged in discussions, workshops, and hands-on learning activities that enabled them to translate cybersecurity concepts into practical workplace applications. Beyond enhancing technical awareness, the training emphasized the importance of cultivating a culture of vigilance, accountability, and shared responsibility in protecting information systems and organizational data.
The training also emphasized the importance of recognizing and reporting cybersecurity incidents at the earliest possible stage. Participants learned how to distinguish routine operational concerns from incidents requiring immediate attention, identify warning signs such as unauthorized access, suspicious account activities, and data exposure, and understand the importance of preserving evidence and following proper incident reporting procedures. These sessions reinforced that effective cybersecurity depends not only on technology but also on the vigilance and active participation of every member of an organization.
As the first cybersecurity training program offered by PETD, the initiative marks an important milestone in UP NEC’s continuing efforts to provide relevant and responsive professional training programs. More importantly, it reflects the Center’s commitment to helping organizations build a culture of cybersecurity awareness and resilience by empowering professionals with practical knowledge that they can immediately apply in their workplaces.
