Atlantic Security Conference

Far too often if an organization has a cybersecurity awareness campaign, it’s a check-the-box, compliance driven effort using generic out-of-the-box context talking about the same security highlights that employees have heard countless times. But a truly effective awareness campaign is one that ultimately results in behaviour change at the individual and organizational level. Done well, an effective campaign provides insight into relevant current cybersecurity threats and issues, organization specific policies, plans and approaches for mitigating risk and tangible steps that individuals can take to detect, report and assist in recovering from cyber attacks. During this presentation, Moussa Noun, CASP| Senior Manager Awareness & Education, Global Cyber Security for the Royal Bank of Canada and David Shipley, CISM, CEO and co-founder of Beauceron Security will talk about how to create truly compelling and engaging educational experiences for users and provide practical examples for a number of firms and industries. During the talk, Noun and Shipley will demonstrate an evolving framework for planning, executing and measuring awareness campaign impact and success. They will provide tangible examples of how quality, not quantity of content is critical for the educational experience and maximizing return on investment for time spent on awareness campaigns.