Given that human-risk remains significant, with human error accounting for 82% of data breaches according to the 2022 Verizon Data Breach Investigations Report, no wonder CISOs across European organizations are aiming for the most innovative and ground-breaking activities during this crucial time of the year.

Once key risks have been identified, it’s go-time: spread priority secure behaviors throughout your organization using the ultimate medium: gamification.

Fail to play, fail the Cyber Month game

From football matches to Monopoly fights, there is a game for everyone, and whichever your preference goes to, the chosen one will always elicit enthusiasm.

It is then only logical that when meeting an opportunity to learn secure behaviors, employees will favor a game rather than an e-learning that they will have to – let’s face it – painfully sit through.

Gamification is a winner, and although there are many reasons behind this fact, we have selected seven striking pieces of rationale that will shed a light on the benefits that gamification presents in a learning environment.

Gamification increases engagement dramatically

To feel involved in an activity, and therefore reach the holy grail component of attention, interactivity is key.

Games require action from the participant, which transforms the latter into a moving cog of their own learning process.

Additionally, the element of competition, whether between teams or against a fictitious villain, present in games serves as a powerful motivator, further promoting engagement.

Practice beats theory in a learning context

Practice accounts for 70% of the learning process. Why so? Because practice allows to make the materials tangible and embed them into real-life situations, that employees can directly link to their everyday practices.

Feedback and rewards stimulate positive behaviors

Games imply prizes and rewards to be earned. Not only does it contribute to foster motivation, but it also allows employees to access direct positive feedback about their actions and decisions, which comes with a sense of accomplishment and progress, further embedding the targeted secure behavior.

Games revamp the image of your cyber team

Cyberawareness games have the power to shift the perception that staff hold of your cyber team. Indeed, cybersecurity may seem like an obscure and complex area for many employees.

Offering games helps to make security concepts more tangible, accessible, and applicable into everyday life.

Further, if they are held in-person, they allow your cyber team to gain visibility with end-users and bring a sense of recognition and trust, which in turn will boost the impact of future awareness actions.

Learning together increases team cohesion

As if learning more effectively wasn’t enough, gamification also offers the valuable benefit of boosting team spirit.

Many awareness games provide the opportunity to work collaboratively to attain success. This way, employees leave with fond memories and appreciation on top of precious security tips.

Games allow repetition of security messages in novel and fun ways

When aiming to embed secure behaviors across an organization, repetition is crucial to ensure integration and implementation.

However, repeating awareness communications through the same channels may decrease the attention that employees pay to them.

Games constitute an innovative and enjoyable experience to reinforce security messages, making them stick over time.

Bonus: You collect valuable feedback and inputs from end-users

By interacting with staff through awareness games, your cyber team gets the unique opportunity to collect information on the most urgent security questions that employees ask themselves and uncover which are their biggest challenges in terms of security in their daily activities. This feedback is then useful to prioritise future awareness messages and review or implement processes to facilitate employees’ work life. For example, if staff repeatedly bring up the fact that they may see suspicious-looking emails but don’t know how to report them, this may lead to a special awareness campaign meant to remind employees of the way to report phishing emails, and the implementation of a phishing report button to facilitate the reporting process.

Leveraging gamification: The musts for organizing successful awareness games

Prior to establishing the success factors of an awareness game, let’s pinpoint what makes a fruitful one.

In order to prove truly effective, an awareness game should see its participants leave the activity with a clear idea of the security behaviors that they will change in their own office life.

To achieve this goal, we have identified a set of five key criteria:

A solid game will cover a priority awareness topic, based on the risks identified for the organization and ranked accordingly.

Then, the right level of complexity must be found, based on the level of knowledge of your staff.

Staff who already have a high level of maturity in terms of security behaviors will – at best – not learn anything new during an easy game, and – at worst – be bored or resentful towards the security awareness team for taking away some of their working time to cover elements they already know.

The reverse scenario would also be problematic: confronting beginner staff with a difficult game would only leave them confused.

Having an understanding of the level of security maturity of your target audience is therefore key to adapt the game for optimal results.

Thirdly, the game must have at its center a compelling story. The scenario must be intriguing and should unfold seamlessly. Additionally, it should be adapted to the context of the organization so participants relate to the events happening in the game.

To truly catch, and most importantly, retain employees’ attention, the game will have a strong focus on interactivity. Interactions can happen between the game master(s) and the players, but also between players themselves when collaborating in the context of the activity.

To further exploit this concept, the game may stimulate the 5 senses to render it even more engaging and immersive.

The final key element to an effective game resides in providing a good incentive. Again, there are multiple ways to achieve this: you can for example establish a scoring system to foster playful competition between teams, and implement rewards. Rewards may come in the form of goodies, prizes such as individual or team experiences, or even donations to the charitable organization of the participants’ choice. A solid incentive will boost voluntary participation to the activity, and a decision to participate that comes from the genuine willingness of staff will also be synonymous with higher motivation and involvement in the game for better retention of the shared secure behaviors.

Which awareness game is made for you?

To make your Cyber Month gamification dreams come true, let’s jump from theory to practice!

Take the quiz below to find out which cyberawareness game is tailored to your needs and objectives for maximal impact.

Loading…

Cet article How to activate gamification for an impactful Cyber Month est apparu en premier sur RiskInsight.

In a never-ending quest to find innovative ways to raise awareness on cybersecurity topics, the Wavestone team might have very well unearthed the new golden nugget.

Tested and approved by hundreds of our clients’ employees, read on to find out the secret recipe that makes cybersecurity best practices so easy to digest. 

Employees are assembled into teams of four or five participants. 

The mission starts with a 10-minute briefing where they receive a lightning-fast training to become agents, and step into the shoes of hackers to perform their mission – should they accept it. 

They are then given 15 minutes to uncover as many confidential documents as they will find in their fictional target’s office. The game elaborately weaves in clues of varying difficulty level related to key security topics, including passwords, physical security, and social engineering to name a few. 

Finally, participants come out of their adventure eyes bright and laughing, enthusiastic to move on to a 15-minute debriefing, where best cybersecurity practices are explained. 

In the end, the activity mobilizes employees for a mere 40 minutes, which pass by in a flash, and leaves them motivated to implement concrete actions to protect their organization.

Gamification never disappoints  

Quite a few years might have passed since you and the members of your organization ran around your school’s playground, but one thing remains the same: games are still a unanimously popular way to learn. 

Through gamification, people become actors, instead of spectators, of the learning process and embody the principles that you aim to instill in them. Keeping in mind that practice makes up 70% of the learning process, that is an opportunity that is hard to pass by.

When adopting an active posture, participants get immersed in the activity, and they do not even realize that they are acquiring precious skills that will serve them and their organization’s security well for years to come. 

Spice it up with competition 

What do football, chess, and Monopoly have in common? Besides the fact that they are all games, they also include an element of competition. 

In the context of a challenge, competition acts as a strong motivator and a driver to perform. Add a fun and safe environment to the mix, and you have yourself a perfect combination to tremendously boost engagement. 

Our cyber escape game includes a smart scoring system, so teams feel driven to reach the highest score, and you can gather information on overall performance. That’s what we call a win-win. 

The more the merrier 

When faced with a puzzle to solve, who would be against a little bit of help? 

Indeed, completing an exercise on one’s own can be daunting, if not just plain lonely.  

As part of a cyber escape game, people are encouraged to collaborate to solve clues. Teamwork then makes the challenge even more fun as creative ideas to break codes burst and are implemented, rendering their success all the more rewarding. 

Bring the human touch to learning experiences 

To complement online training initiatives, providing staff with a way to engage in-person with cybersecurity experts allows to go the extra mile in accompanying them on their learning journey. 

Indeed, this format promotes live discussions and gives people the opportunity to receive personalized answers to their specific questions related to security.

The result? Employees coming out of the activity with advice that precisely solves their pain points. 

Not only is the format of the cyber escape game particularly appreciated by employees, it also presents multiple advantages for your organization in terms of implementation. 

Take it from the Wavestone team !

Over the course of the month of October 2022, Wavestone Belgium carried out +100 cyber escape games sessions with +400 players across 6 countries.  

As training sessions last 40 minutes each, up to 45 collaborators can be trained in one day, maximizing time-efficiency. 

Further, customization is at the core of our approach, with a debriefing that exposes concrete ways to apply the best security practices that are most crucial to your organization.

Although we could keep on enumerating the benefits that a cyber escape game can bring to an entity’s security, a game is still worth a thousand words.

Curious to understand how the cyber escape game leaves employees asking for another serving of awareness activities? Get in touch with our expert Thomas Vo Dinh to organize a free session.

See you on the other side, agent

Cet article Cracking the recipe: making employees hungry for more cyber awareness activities est apparu en premier sur RiskInsight.