Cybersecurity Awareness Training (SAT)
EMPLOYEES negligence and/or lack of awareness remains the biggest security weakness in most organisations!
Introducing Security AwarenessNow!, a fully managed cybersecurity training service that is designed to prepare your employees for today’s sophisticated cyber attacks.
- Delivered at the ease of their workstations
- Highly interactive web-based training module
- Monthly simulated phishing attacks
- Short test to measure the level of awareness
Change in attack focus
Then
Target systems application and networks with malicious contents.
Now
Target employees with social engineering and deception.
Good News for HRDF Contributors: Security AwarenessNow! is Fully HRDF Claimable!
Under HRDF’s “Skim Bantuan Latihan (SBL)” , it states that there is ‘NO’ Maximum claim limit for e-learning (Online Distance Learning) which means employers who contribute to HRDF Malaysia can make use of this opportunity to empower their employees while simultaneously reimbursing their spending from HRDF Malaysia.
Our Approach - Continuous Training
How do we do it?
- We start with the Assess stage where we measure the baseline of the current awareness level – via Knowledge Assessment (Quiz) and Simulated Phishing Attack.
- Based on the data collected in the Assess stage, we will device an online training programme consisting of Interactive Online Training modules (which focus on practical exercises and games). This is the Educate stage.
- During the Reinforcement stage, we will reinforce the learning by repeating phishing attack to those who failed.
- The methodology relies heavily on in-depth reporting, so that we know if the training is effective.
Step 1: Assess
Simulation Campaign
Phishing
Lure targeted user to click on a link in an email.
Credential Harvesting
Lure targeted user to enter credentials into a fake website. No .passwords are collected
Attachment
Lure targeted user to open an attachment within an email.
Step 2 & 3: Educate and Reinforce
Security Topics
- Phishing
- Credential harvesting
- Vishing (phone phishing)
- Social engineering
- Ransomware
- Secure social media use
- and more!
Compliance Topics
- EU General Data Protection Regulation (GDPR)
- Gramm-Leach-Bliley Act (GLBA)
- Health Insurance Portability and Accountability Act (HIPAA)
- Payment Card Industry Data Security Standard (PCI DSS)
Knowledge Checks
- Interactive quiz following each course
- Full reporting of course completion
Step 4: Measure
In-depth report
