Society's increasing dependence on IT has brought with it an increased risk of cyber-attacks. These often target users - the weakest link in the system - rather than just technical weaknesses. Although security threats can be partially prevented by hardware and software, it is crucial that users are educated about social engineering, know how to identify threats, react appropriately and know who to contact in the event of an incident.
Our aim is to raise awareness in the most effective way possible. We have developed an approach that includes instant education when a malicious link is clicked, and interactive role-playing in the form of quizzes with feedback. We deliver both generic and targeted messages to users, as we aim to achieve greater personal engagement with the educational process.
We will test the effectiveness of the approach in an experiment carried out in a selected Slovenian company. The results will provide insights into the current state of knowledge of employees and assess the usefulness of our approach for further educational campaigns.
|
