Security Awareness Trainings

Security Awareness Trainings for Companies

No matter which type of social engineering is used – human error is the most common cause of IT security incidents. The Verizon Data Breach Investigations Report (2022) found that 82% of all security incidents involved a human element.

The level of security awareness among your own employees is therefore decisive for your own IT security measures – both for the prevention of security incidents and for their detection, for example by forwarding a suspicious email to the responsible team.

6 reasons why security awareness trainings fail

• Treating security awareness as a compliance checkbox task that has nothing to do with one’s own working world.
• Insufficient, or unappealing and unsuitable training material
• Employees not understanding what security awareness really means and that it is not something handled by “IT”.
• No measurement of success is carried out
• Unrealistic expectations
• Not enough repetition

Our concept for security awareness trainings

Redlings has developed a holistic security awareness concept in order to better prepare employees for the risks arising from cyber attacks.

One component of this concept is the Cyber Security Escape Room developed by Redlings for members of IT teams.

Cyber Security Escape Room

With gamification and realistic scenarios, a high level of involvement of all participants is achieved. By changing perspective, participants engage more deeply with the attack vectors available to companies from an attacker’s point of view.

The Concept

• A small group of people has to free themselves from a physical – or virtual – room.
• To do so, a specific scenario must be successfully mastered.

The Simulation

• In the simulation, participants take on the role of an attacker and carry out cyber attacks themselves in a secured environment.
• In doing so, they experience a company from an attacker’s perspective.
• They go through the relevant phases of modern cyber attacks: open source intelligence, phishing, reverse shells, lateral movement and privilege escalation.

The Process

• Participants should have IT knowledge; specialized IT security expertise is not required.
• A team consists of 5-15 participants.
• The simulation is realistic and even uses tools as they are used in a real cyber attack.

The Added Value

• An intensive security awareness is acquired in a playful way, as the phases of a cyber attack are experienced in the simulation.
• This makes vulnerabilities in IT and in human behavior obvious and can lead to a significantly more resilient IT environment.
• Team building: every participant can contribute, everyone helps to find the solution and celebrates the success as a team.
• Increased learning effect through one’s own emotional experience

Have we sparked your interest?

Just give us a call or write us a message!