Explore why every organization needs an IT security awareness training program. Turn your employees into an active part of your cyber defense.
When it comes to your employees, promoting IT security awareness is business-critical for one simple reason: more than 90% of security breaches involve human error. That means your greatest assets – your people – are also one of your biggest security risks.
Many organizations have dumped a lot of money into security awareness training in an effort to instill greater IT security awareness among users. Unfortunately, the ROI on these efforts is usually disappointing. Most security awareness training for employees fails to change behavior, and it's not hard to see why: training is usually boring. It's often packaged in long, tedious sessions that employees dread – or worse, avoid – and once it's over, best practices are soon forgotten.
That's why Mimecast decided to turn IT security awareness training on its head. Rather than run-of-the-mill security awareness courses that read like a PowerPoint presentation, we've developed massively engaging, video-based training that uses one of education's most powerful tools: humor. Simply put, our stuff is hilarious. With the help of top talent from the entertainment industry, we've put together a series of mini sitcoms that mix a little learning with a lot of laughs. Employees don't just like our IT security awareness courses – they love them, and they ask for more.
To avoid information overload, we deliver IT security awareness courses in 3- to 5-minute modules that employees engage with roughly once each month. That keeps learning fresh and makes sure that IT security awareness is continually on their radar.
Mimecast Awareness Training was developed by cybersecurity leaders from the military, law enforcement and the intelligence community. The program instills IT security awareness by focusing on four things.
Information security awareness training is designed to address an organization's weakest security link: human beings. Studies show that human error is involved in more than 90% of major data breaches. With the average breach costing more than $4 million to remediate, it makes sense that organizations of all sizes have invested heavily in cyber awareness training.
The problem is, most awareness training programs simply don't work, for several key reasons:
When employees aren't engaged – or worse, when they're resistant – they simply won't learn. That's why Mimecast has built an information security awareness training program that features the educator's secret weapon: humor.
Mimecast's cyber security training courses are different than anything you've ever seen. For starters, they're funny. Not groaner-pun, dad-joke funny, but genuinely hilarious. They're created by real comedy writers and entertainment industry pros and presented as mini sitcoms that employees actually look forward to watching.
We chose funny over boring because – surprise, surprise – funny works better. People pay attention, they get invested and, in the process, they learn. Any educator can tell you: humor works with students of all ages, driving long-term memory retention and higher learning results.
Another radical difference in Mimecast information security awareness training: short training modules. Each session covers a single topic and is no more than five minutes long, enabling employees to easily absorb critical security best practices. And rather than making employees sit through hours of training at a time, we deliver short doses every month to keep learning fresh and security top of mind. Busy employees can complete their monthly training in just a few minutes, making it a welcome break rather than a dreaded hours-long event.
In addition to massively entertaining, video-based training modules, Mimecast employee security awareness training includes:
Beyond delivering clear and measurable results, there are many reasons to choose Mimecast for IT security awareness training.
|Mehr Wissen: Bewusstsein vor und nach der Schulung|
|Phishing||33,0 %||81,2 %||246 %|
|BYOD||28,1 %||86,6 %||308 %|
|Social Media||37,7 %||80,1 %||212 %|
|Passwörter||12,5 %||54,6 %||437 %|
|Unbeabsichtigte Offenlegung||18,6 %||78,4 %||421 %|
|Insider-Bedrohungen||17,8 %||62,6 %||345 %|
|Schatten-IT||26,7 %||53,9 %||202 %|
|Speichergeräte||34,5 %||88,2 %||256 %|
|Bedrohungen melden||17,8 %||62,6 %||345 %|
|Tailgating||27,9 %||67,2 %||241 %|
What is the goal of information security awareness?
The purpose of information security awareness is to encourage employees to better understand the many cyber threats that jeopardize their organization's security and how their actions can promote security.
What is information security awareness training?
Information security awareness training provides information on the many threats that employees may encounter in the workplace and the actions they may take that either mitigate threats or enable them to do damage. Security awareness training typically shows employees what threats look like, how they work, and how to best avoid or stop them.
Why do we need information security awareness training?
Human error is a significant part of threats to organizational security, contributing to more than 90% of major data breaches. Information security awareness training can help to reduce the chance that an employee will take an action or make a mistake that causes a breach.
Does Mimecast cover Office 365 security and compliance training?
Mimecast Awareness Training covers many aspects of security that are important to Office 365 users, including the danger of phishing emails, ransomware and CEO fraud, as well as compliance issues for HIPAA, PCI and GDPR.