Security Awareness Training

An effective Security Awareness Training program provides many benefits that can help protect your company from hackers, thieves, and other bad actors.

• Training reduces errors. A recent study showed that 80% of breaches are caused by employee carelessness. If a program is implemented to teach them about common scams, such as Email attachments that contain malware or phishing Emails that steal personal information, they are much less likely to accidentally click links or open files that can threaten your assets.
• Training enhances security. With vigilant employees properly using strong passwords, flagging suspicious emails, and alerting supervisors about unusual communications or activity, the company itself becomes less vulnerable.
• An educated staff increases compliance. As cyber-crime continues to wreak havoc, regulations continue to be implemented to protect data. Many of these regulations are mandatory and failure to have adequate safeguards can lead to lawsuits and/or fines.
• Security training can help protect a company’s reputation (and possibly save the company itself). A security breach can destroy confidence in your brand, causing consumers or clients to flee in droves. One study shows that more than 70% of small businesses go under within 6 months of a successful attack.
• Education helps morale. Scams are increasingly sophisticated and many employees are embarrassed that they don’t know much about security or what to do to stay safe. A security awareness training program can educate everyone discreetly, enhancing job satisfaction and employee retention along the way.
• Your company will save time and money. On average, it takes more than 7 months to identify and recover from a successful cyber-attack. The disruption to business operations and subsequent costs to small to mid-sized businesses average upwards of $955,429, much of which is spent on remediation, system upgrades, fines, legal fees, etc. Does your company have this kind of spare cash to burn?
• You will have peace of mind. Having a strong security policy coupled with security awareness training means less worrying. You’ll be able to relax more, and perhaps even get a good night’s sleep, knowing that everyone is on the same page.

Security awareness training is not a one-and-done exercise. Regular security training through multiple media is ideal. Therefore our Breach Prevention Platform (BPP) takes security training to a whole new level by providing:

• Classroom Style In-Person Training Seminars allow our instructors to see whether learners are engaged throughout the process and adjust accordingly. It also allows participants to ask questions in real time.
• Interactive Online Training enables employees to work through the training materials from any location at their own convenience and pace, avoiding disruption to normal business processes.
• Phishing and Social Engineering Campaigns: Nothing captures a learner’s attention quite like the realization that they’ve fallen for a Phish or one of many other Social Engineering ploys. Of course, learners who fail the phishing and social engineering tests will be automatically enrolled in further training to reinforce their security concepts.

If it can be measured, it can be quantified. Our Breach Prevention Platform (BPP) is designed to assess and define an organization’s unique threat profile and create a baseline for the business. The business’s baseline is then compared against each user’s Employee Vulnerability Assessment (EVA)  allowing convenient monitoring of each user’s training progress in our dashboard in real time. Topics covered in our platform include, but are not limited to:

• Phishing and Social Engineering: Employees will be educated on how to spot and report phishing and other social engineering attempts. Users will also learn the dangers of interacting with suspicious links or entering credentials on a spoofed web page. Phishing and other Social Engineering practices extend well beyond the traditional Nigerian Prince Email scam. Overviews will cover spear phishing, whaling, suspicious phone calls, contact from suspicious social media accounts, etc. Examples of phishing attempts that have affected other organizations will also be covered.
• Physical Security: Physical security requirements can vary by an organization’s nature. Since businesses should already have a physical security policy in place, this is a great opportunity to make sure employees understand the parts of the policy that apply to them, such as locking desk drawers and rules about allowing guests into the office. Training will also review how to report physical security risks, such as someone in the building who isn’t wearing a guest badge or sensitive data that is left exposed in publicly accessible areas.
• Desktop Security: Outline the potential consequences of failing to lock or log off computers at appropriate times and plugging unauthorized devices into workstations among other relevant desktop security issues.
• Wireless Networks: Explain the insecure nature of wireless networks and outline the risks of connecting to unfamiliar ones.
• Password Security: Complex password requirements and prompting employees to change their passwords on a regular basis should already be enforced, but password security training is still important to explain the risks involved in reusing passwords, using easy-to-guess passwords, and failing to change default passwords immediately. Password management tools are also covered in this series.
• Malware and Ransomware: A series of training sessions on malware and ransomware that define the various types and explain what they are capable of. Users can learn how to spot malware and ransomware and what to do if they suspect their device has been compromised.

In addition to training and reporting, our platform is designed to provide continuous education. We can provide weekly 2-minute micro-training videos and short quizzes all designed to keep cybersecurity short, engaging, and interactive. We can also run continuous Phishing and Social Engineering campaigns that are designed to keep users alert and ready for action.