Cyber security training for staff

[ful56_uk]

Good morning

 

Do any of you guys run basic cyber training for staff or have brought in any training packages.

 

If so do you have recommendations?

 

Cheers

[synaesthesia]

We keep pushing out advice but intend on doing physical training with staff when allowed; I think a hands-on approach using real-life examples of malicious emails etc is FAR more effective than a faceless course.

"Yes, we received this. Yes, someone opened it. Yes, this is what COULD have happened on our system, and these are the knock-on effects. This is what DID happen on someone's personal computer."

Your average course is just going to punt the same old rubbish we get year in, year out about silly passwords and is highly unlikely to be particularly current. This can also give you the opportunity to run some "test" phishing emails, something that would certainly benefit those who learn by doing rather than sitting, yawning in the back of your school hall

[gshaw]

I created my own with a mixture of slides, videos and a Socrative quiz to keep the audience engaged.

 

We've also got access to a SCORM package for formal training as our college is a member of UCISA so that goes up on Moodle

https://www.ucisa.ac.uk/istoolkit

[VirtueTechnologies_Nick]

Following on from what @synaesthesia said about test phishing emails; Sophos have a useful tool called Phish Threat which may be worth a look.

[TechMonkey]

I am doing training in 5 hours, something I have knocked together from various sources. It covers emails, passwords, data security, social media. We have run a phishing exercise as part of a penetration test previously and it was better than we thought but the usual suspects. I would love to run a regular test and have the results linked to mandatory training, if a user has too many strikes, and to CPD/PM but I can guess how that would go down.

 

I spoke to a MimeCast rep who was telling me about an online security training package (ataata) they offer that looked great but the cost and likely take up was a stumbling block for us.

[ful56_uk]

Thanks for the info, i have just found this as well

 

https://www.eset.com/us/cybertraining

[colly72]

I'm a bit late to the party on this but we're currently looking at Sophos Phish Threat and also Knowbe4 (https://www.knowbe4.com/)

[VirtueTechnologies_Nick]

Hi @colly72

 

I'm not sure how far along with the process you are, but there is a free trial available for Phish Threat. Just let me know if you'd like me to get this set-up.

 

Thanks, Nick