BlogSecurity
Security awareness training that works
By David Otieno, Senior ICT Consultant 1 min read
Short, frequent, relevant training changes behaviour more than an annual lecture. Make reporting easy and blame-free.
People are often described as the weakest link. With the right training, they become an early warning system.
Keep it short and frequent
Brief sessions or messages every few weeks keep security in mind.
Make it relevant
Use examples from your sector and tools staff actually use.
Practise
Simulated phishing exercises, followed by immediate, supportive feedback, build habits.
Make reporting easy
Provide one simple way to report suspicious messages and thank people who use it.
Avoid blame
People who fear punishment hide mistakes. Early reporting limits damage.
Cover the risks people actually face
Payment fraud through email, fake login pages, malicious attachments, social engineering by phone and lost devices are the most common. Short, scenario-based examples from your own sector stick far better than generic slides.
See our security services.
About the author
David Otieno
Senior ICT Consultant
David Otieno writes about cybersecurity, physical security systems, power resilience and running IT reliably day to day.