A hands-on cyber-awareness program
Both Shamane and Magda have run security programs for various organizations. In Magda’s approach, she provides holistic hands-on training (Figure 11.2). The training encompasses several activities and is based not only on consistency but the why and the how.
The assumption that everyone will apply cyber awareness does not make sense if the security awareness training they have to complete is irrelevant to their role. Awareness training activities that align with each function help employees to understand their cybersecurity role and apply best practices in their daily tasks.
As part of her approach, Magda carries out dedicated secure coding sessions while conducting cyber-awareness training. She also uses online quizzes with prizes such as lunch vouchers or Amazon gift cards to encourage attendance. Her sessions have had as many as 300 attendees for a nonmandatory...