Source |
ProofPoint |
Identifiant |
8399766 |
Date de publication |
2023-10-24 07:48:01 (vue: 2023-10-24 15:09:40) |
Titre |
Au-delà du statu quo, partie 2: 6 approches percutantes pour maintenir les personnes engagées dans la sensibilisation à la sécurité Beyond the Status Quo, Part 2: 6 Impactful Approaches to Keeping People Engaged in Security Awareness |
Texte |
This is the second installment of a three-part blog series where we cover topics from our Wisdom 2023 sessions. In each blog, we explore creative techniques for inspiring engagement in security awareness and building a strong security culture. In the first article, we covered how to personalize and invigorate your curriculum for your users using threat intelligence.
Every October, security professionals use Cybersecurity Awareness Month to promote best practices and the shared responsibility for behaving safely. But to stay safe, you have to stay vigilant. And that requires people to constantly be engaged. So in our second Wisdom session, we explored ways to inspire engagement in security awareness for both users and practitioners.
Typically, when we\'re talking about engagement, we mean end users-and we all know how challenging it is to keep them engaged. In our 2023 State of the Phish Report, for instance, over 30% said security isn\'t priority at work for them. That\'s why in this session we discussed three ways to motivate and inspire your employees.
We also addressed a group of people who are typically overlooked-security awareness practitioners! When you push yourself to find enthusiasm in security awareness, your attitude can have a cascading effect on how your employees engage. So we also covered three ways to find inspiration.
This article recaps the insights we gained in conversation with Janet Roberts, former SVP/global head of security education and awareness at Zurich Insurance Company, and Brian Roberts (no relation), solution manager of information security awareness for Campbell\'s Soup Company. (Quotes have been lightly edited for clarity.)
3 impactful ways to engage employees
If you\'re looking for creative ways to motivate and inspire your employees, Janet Roberts and Brian Roberts have some tips:
1: Build and nurture an ambassador program
At Zurich, Janet launched an ambassador program that is now used by 32 of the company\'s teams around the globe. Every month, her security awareness team creates a toolkit to distribute “grass roots,” always covering one simple topic that is customizable to the ambassadors\' culture, language and policies. Zurich has five regional CISOs and a global CISO, each of whom decide the strategy for delivering this material within their region. in their region.
When it comes to measuring program outcomes, metrics will most likely be qualitative not quantitative because when it\'s done right it will be highly tailored to people and places. According to Janet, “[An ambassador] program helps you to meet people where they go for their daily information. Make sure you map it to the structure of your company…and [make sure] your ambassadors are working within their regional strategy or country strategy.”
Brian agreed the ambassador program should target a local audience. At Campbell\'s, his security awareness team reaches both inside and outside the organization to cultivate a group of volunteers. Brian\'s advice is to start small, create a volunteer pathway, and build each relationship as you scale up. “The more you make that personal, the more you drive an organization that will create change. When you see ambassadors sharing stuff they did in their communities and at home, that\'s when you know it\'s connecting.”
When asked by attendees during the Q&A about how to get those first volunteers, Brian said, “Be very open so people feel you\'re approachable and they can bring personal stories to you. That\'s where you find that first pool of people that you can then send out to find more people.” Janet added that at Zurich, “We started with people whose job was to lower the human risk factor, like security officers and service executives. From there, they added their own connections and built their teams.”
2: Create a people-focused messaging strategy
In this part of the session, our panelists shared ideas about how to build effective messaging and tailor the content so that everyone can und |
Notes |
★★
|
Envoyé |
Oui |
Condensat |
100k 2023 ability about access according achievement across act actionable activism adaptability added adding addressed advice after agreed all also alternately always ambassador ambassadors american apply approach approachable approaches are area around article ask asked attendees attention attitude audience awareness away back badges beatles because been behaving behaviors being beings bespoke best better between beyond bigger bite block blog bonus both brainstorm branding brian bring broadcast build builder building built but calendar came campaign campaigns campaigns campbell can career cascading caught cause causes centuries certain challenge challenging champion change changes: change changing ciso cisos clarity closely coins collaboration collages come comes comfortable communications communities community company company…and concept concepts concerned conclusion connected connecting connections consider consistent constant constantly content continuously contribute contributing contributions conversation core corporate countries country cover covered covering crack cracker create creates creating creative creativity cultivate culture curriculum customizable cyber cybersecurity daily day decide deliver delivering demonstrate depending design did difference different discussed discussions disruptive distribute diverse doing don done drive driven dubbed during each edited education effect effective email emails embracing employee employees employees enable end ended energy engage engaged engagement engaging english enjoy entered entertaining entertainment enthusiasm enthusiastic essential evaluate even events every everyone everything evolving example exceptional excited executives experience explained explanations explore explored extended eyes factor feeder feel feels final find finds first fit five focus focused focusing force former forward friends from full fun gained game gamified gather gave get give global globally globe goal going good grab grassroots gray great group hand handles has have head hear help helps her highly him his home hook hot hours: how however human hyper icon ideas identity immediate impact impactful important incentive incentives incident industry information inside insights inspiration inspire inspiring installment instance insurance intelligence interesting invigorate involved involves isn item janet job jump keep keeping kernel key know lance landscape language latch launched leading learn learning legitimate lets level lighter lightly like likely linear little local locally long longer looking love loved lower maintain make making management manager many map marketing material mean meaningful measuring meet meme memorable message messages messaging metrics might mind mindsets minute mission monkey monolithic month more most motivate movement much need networks new next not note now nugget nurture october officers one ones only onto open organization out outcomes outside outsider over overlooked own packed panel panelists part partnership password path pathway pay people person personal personalization personalize perspective philosophy phish phones photos picture pillar pivot places plans play playful plays point policies pool position practices practitioner practitioners practitioners priorities priority profession professional professionals program program promote promoting protecting proud push q&a qualitative quality quantitative quipped quo quote quoted quotes range reaches read realize really recaps recognition recognized red reduce region regional regular regularly related relation relationship relationships replay report reporting reports requires respect respond response responsibility retain retrospective reward rewards right risk risks roberts robust role rooted roots safe safely said scale scaled second security security: see sees segment send series service session sessions sets share shared sharing she shifting shine should signatures simple sized skill skills slang slogan small solution some something sound soup spam speak specific spitzer sprinkl |
Tags |
Tool
Threat
|
Stories |
|
Move |
|