It doesn’t matter what size your business is, cybersecurity plays a big part in the running of any company. From the budding entrepreneur to the big corporate at some level we’re all collecting, storing and sharing data - that in the wrong hands would have awful consequences.
They say that security is a process and awareness is you most effective defence. If 90% of breaches are down to human error, the human is where you should be doing your best work!
Initiatives like Cybersecurity Awareness Month are great because they remind us to shake it up a bit. Do something different. Inject some fun into it. After all, if you don’t get buy in from your staff and colleagues, its just a box-ticking exercise.
1. Create a slogan that becomes part of your security ethos. One company I worked with are still chanting ‘delete, delete, delete’ after they realised the more they store, the more they’re at risk. Here’s a few to ideas to get you started:
2. Google yourself. Set everyone a time limit to see how much they can find out about themselves on the internet. There are a number of OSINT tools like these out there to make this a more interesting exercise. Follow up with a group chat about the potential risks of that information and how it can be used for social engineering.
3. Best Phish. Challenge everyone to craft the best phishing email. The one that works wins a prize. Once they realise how easy it is to do, they will see phishing in a whole new light.
4. Fun Fact Theme. Pick a theme for the month like safe email, passwords, social engineering, apps, ransomware, or Internet of Things devices. Dedicate 5 minutes a day to a new fact. Find videos, stats, do up posters and start the morning with your Fun Fact.
5. Play games. Many of us are still working from home so turn this into a team building activity. Bring the element of fun to a serious subject and the message will land far better. There are many capture the flag resources online, lookout for online cybersecurity quizzes during October or invent your own. Every team member has hidden talents you may not know of. Unearth them!
Finally, at the end of the month wrap up with a party or a pandemic friendly celebration. Send out a report on all the activities you did during Cybersecurity Awareness Month to reinforce the learning and the value of the activity.
For more information on how can help you tailor some bite size cybersecurity training or activities for your organisation, get in touch here.
Data Influence blogs and stories are provided for information only, not legal advice. Always consult your lawyer on legal matters.
