The most effective training modules share these five characteristics Entertaining Timely/Frequently Diverse/Relevant Interactive tested According to a report by Osterman Research a well-designed modular approach can increase cybersecurity awareness and induce behavioral change—that is evoke instinctively cautious responses to perceived cyberrisks. [1] From there aim for the next level - a cultural shift where employees see themselves as part of the solution to their organization's cyber risks.
Entertainment value boosts results Employees find it difficult to engage in boring training programs - a point highlighted in Mimecast's white paper Teaching Good Security Behaviors with Seinfeld . The paper Whatsapp Mobile Number List emphasizes the importance of writing videos that draw viewers in through humor and character development in an ongoing series. The Osterman report quantified this correlation between well-designed modules and desired behavior changes by surveying employees' attitudes towards their cybersecurity training programs.
At the behavioral level for example 95 of participants who found their training modules interesting say they feel confident reporting suspicious emails and attachments. Only about 75 of those who found their education boring can say so. At a deeper cultural level only about one in five employees who found their modules boring say the training significantly to fundamentally changed their attitude towards safety. Nine out of ten of those who found the training very interesting experienced this change in attitude. Ongoing cybersecurity awareness training keeps lessons fresh People forget. New lines of business create new risks.