From Snooze To Enthuse: Making Security Awareness Training 'Sticky'
DARKReading, Friday, October 20,2023
Most companies offer some kind of awareness training these days. But how much of those lessons are employees actually retaining?
Imagine this: As part of an exercise to teach security awareness, employees enter a room. An actual, physical operational security "escape room," which at first looks like a regular office room. But as people look closer, roleplaying as criminal social engineers that broke into the building, they start to spot information they can use for nefarious purposes.
For example, there's a password in a trash can. And there's a video conference meeting left unclosed. All around the participants are clues that could help them exploit the business. The hope is this experience helps them see through the eyes of a criminal - and leaves them understanding the importance of physical security. Once they are done, the goal is to have them remember the need to keep things like whiteboards clean, laptops locked, and documents hidden or shredded to protect the company.