This hands-on session covers phishing simulation exercises and Vulnerability Assessment and Penetration Testing (VAPT) as tools for identifying and addressing security weaknesses. Participants will learn how to plan and interpret simulated attacks and vulnerability assessments to strengthen institutional security posture. Designed for ICT security staff and teams responsible for proactive threat management.