Awareness plans are usually split by department, the criterion that ages worst. Which criteria hold up a plan by audience, and how to build the calendar.
Awareness plans are usually split by department, the criterion that ages worst. Which criteria hold up a plan by audience, and how to build the calendar.
Your own incident is the strongest awareness material an organization has. What to tell, what to strip from the account and when to tell it.
The security induction lands on the same day as the contract and the accounts. What to keep on day one and what does more spread across the first month.
The time between signing for an awareness program and sending the first campaign rarely depends on the platform. It depends on three internal decisions.
The clues for spotting a scam expire with the technology that produced them. STEEL://CODE is a cybersecurity manga built on the attack technique.
Once an awareness program turns two, novelty stops doing the work. Which formats to rotate, what to leave alone and how to plan the year.
A phishing reporting habit that gets no answer fades on its own. How to design the consequence of a report so that the circuit finally closes.
An awareness game is played alone, and a shared score leaves a conversation behind. What to compare across teams, how to run the round and what you can measure.