From Protect your Company we have tried to raise the security of information from different points of view. On this occasion, we want to make a comparison with cycling, for which we need you to imagine the safety of your organization in the same way as a sports competition.
Maybe you have the best components with respect to your competitors, with the best effort control devices or the widest budget of all, but in the end, who will have to give pedals, will be the cyclist. With proper training, there will be more chances to win, as we will have guarantees of being prepared to perform at the maximum, but on the contrary, if the training is not good or simply does not exist, you will certainly not be a champion.
With the security of an organization, the same thing happens as with the previous example. You may have invested a large amount of your budget in protection systems such as positive technilogies waf, backup or encryption systems, but in the end, who manages most of the information is the worker. If this has not received adequate training, it will be more likely that a security incident will occur.
In order for your employees to have adequate knowledge regarding information security, we offer you the following tools and resources.
Awareness Kit
This tool incorporates multiple resources that will help the entrepreneur to launch a comprehensive training plan in terms of information security. The awareness kit can be downloaded and delivered to employees in a sequential manner, according to a program that is also provided.
The aim of this tool, in addition to improving the level of cybersecurity in the company, is to convey to the employee the need to follow a series of good practices in their daily tasks, since the continuity of the business could be in its good work.
Sectoral training
The threats present in the digital world tend to affect companies in one way or another depending on the sector to which they belong. From INCIBE we offer specific training that covers 10 different business sectors such as industry, construction, health, leisure, etc., and whose objective is to train members of an organization in cybersecurity thanks to a series of interactive videos.
The main characters, Laura and Miguel, are two entrepreneurs who throughout the different interactive videos show us a series of scenarios that usually occur in companies, which can compromise the security of information. To solve these problems they must take a series of solutions and establish various security measures.
Hack, the game is over
The serious game where besides enjoying while you learn, your employees will improve their knowledge about information security. The protagonist of the game is an entrepreneur named Max whose business is about to take off, but security problems cross his path. The mission in this game is to help Max and his employees protect your company as if it were yours. In the process, many aspects of cybersecurity applicable in the work environment are acquired in a playful manner.
Online course and self-employed
Free training that offers a tailored approach to the needs of micro-enterprises and the self-employed, analyzing the most common risks and the recommended guidelines for day-to-day life. Chapter by chapter, the knowledge necessary to carry out daily tasks in a secure environment is acquired and strengthened and this added value is added to the competencies of the company. During the current year, a new edition will be held. Do not miss the opportunity and encourage all members of your company to sign up.
Role-playing game
In this resource, there are five situations or security challenges that often occur in the company, to serve as training for SMEs and freelancers. No specific technical knowledge is required and challenges can be thrown at a team (this would be the ideal scenario) or they can be used for individual reflection. The objective of the role-playing game is to give an organized and coordinated response to a crisis situation that is, simulated.
That the employees of the company have the necessary knowledge in cybersecurity can make the difference between the occurrence of a security incident or not. To minimize the risks, training, and awareness among employees must be encouraged since ultimately, the benefit of applying these training policies will have a positive impact on the company and its future.
