Kaspersky
SecurityAwarenesskaspersky.com

GamifiedAssessment
ToolGamified Assessment Tool
Kaspersky Gamified Assessment Tool (GAT): a quick and exciting way to assess
employees’ cybersecurity skills.
52% of enterprise organizations and 50% of
SMB experienced cybersecurity incident asa result of inappropriate IT resource use byemployees*
42% of business indicate employees asa most concerning IT security issue (withinappropriate IT resource use, loosing
company owned devices and falling victim tophishing and/or social engineering attacks)*$ 1195 K the average financial impact ofa data breach caused by inappropriate IT
resource use by employees*

Strong cybersecurity is one of the most important, yet weak, areasof many companies today. Сompanies around the world are working
hard on cybersecurity, developing increasingly complex and efficient
protection systems. Yet there remains a hole in the cybersecurity
fabric of every single company that cannot be fixed by technicalmeasures.
This gap is “the human factor”. The human factor is one of the main causes ofcybersecurity incidents. Changing employee behavior can be a challenge. People are
not interested in learning cybersecurity: they have low motivation and often they do
not even realize that they have gaps in their knowledge. How to increase employees’
motivation for training? How to evaluate their current level of cybersecurity knowledge?
The Gamified Assessment Tool quickly measures the current level of employees’cybersecurity skills, engaging and motivating them for further learning. The CIO/HR
departments can understand the overall situation with cybersecurity awareness in thecompany using a short gamified tool as an introductory step to an education program.
Continuous learning cycle

12

3

4

Engagement/
motivation

Starting point

Learning

Consolidation– Why do I needthis?
– Cognition– Am I aware?
– What do I know
and where are thegaps?

– Micro learning– Continuouslearning– Adaptivity– Did I get it right?
– Do I remember this?
– Do I act accordingly?

What does the Gamified Assessment
Tool offer?
• There are three scenarios for the assessment representing familiar situations thatdeal with specific cybersecurity skills: Working in open space, While travelling, and theHome office• Each employee gets a scenario with 12 random situations that deal with specificcybersecurity skills. Employees should go through all of them, assessing whether thecharacter’s actions are risky or not and expressing the level of confidence in their
response using chips.
For each answer, the user earns a certain number of points. When calculating user’s
final score, the system takes into the consideration both the answer, whether it’s isright or wrong, and the confidence level.
• To prevent cheating and make the assessment more interesting scenario types areprovided to employees randomly. 12 situations for each scenario are also randomly
chosen from the library of 225 which means that fellow users will have different
scenarios for evaluation.
• After users complete all the zones, they get the overall score that is an assessment of
their cybersecurity awareness level and feedback on every zone, with explanations anduseful tips.
• On completion of the assessment, a certificate is awarded. It can be downloaded andshared.
• Administrator of the assessment gets a report of all the users with the detailed
results on every topic including scores, number of right answers and confidence level.
This clear feedback on employees’ level of cybersecurity competence helps to planand set up further security awareness training more effectively.
* Report: “IT security economics in 2019”, Kaspersky

1Security domains covered in
the Gamified Assessment Tool:• Passwords and accounts• Email• Web browsing• Social networks & Messengers• PC security• Mobile devices

Learning process
At the beginning of the assessment, a brief
description of the rules is provided.

Within 10 minutes employees need to assess
the characters’ actions in 12 cybersecurityrelated situations represented in thescenario. They need to decide whether
the character’s actions are risky or not andexpress the level of confidence in theirresponse. There is a possibility to pausea game. If you need to attend to somethingelse, don’t forget to pause the game (thepause button is on the upper right cornernear the timer).
Users put green chips if they think it’s safe,or red chips if they think it’s dangerous. The
number of chips indicates how confident
they are in their answer.

After users finish the game, they get theiroverall score which is an assessment of theircybersecurity awareness level.

2

It’s possible to go through each situation.

And get feedback on every zone, withexplanations and tips.

A certificate with the results
recommendations on which cybersecurity
topics require special attention andimprovement and tips for further security
awareness training will be available at the endof the assessment. It can be downloaded
and shared.

Technical recommendations
OS:Windows 7, 10;
Mac: Sierra, High Sierra, Mojave, Catalina;
Ubuntu 18.04.
We highly recommend use browser:
Firefox 70 and higher;
Chrome 80 and higher;
Safari 11and higher.
As a cloud solution, GAT requires only abrowser on a desktop or tablet PC witha resolution of 1024x768 or higher.

3Kaspersky Security Awareness – a new approach tomastering IT security skills
Key program differentiators

One flexible training solution for all
Kaspersky Security Awareness has a longstanding international track record of success.
Used by businesses of every size to train over a million employees across more than
75 countries, it brings together over 25 years of Kaspersky’s cybersecurity expertisewith extensive experience in adult education.

Substantial cybersecurity expertise25+ years’ experience in cybersecurity
transformed into a cybersafety skillset thatlies at the heart of our products

The portfolio offers a range of engaging training options that increase thecybersecurity awareness of your employees at every level, empowering them to playtheir part in the overall cybersecurity of your organization.
Because sustainable changes in behavior take time, our approach involves building acontinuous learning cycle with multiple components. Game-based learning engages
senior management, turning them into advocates of cybersecurity initiatives andsupporters of building a culture of cybersafe behavior. Gamified assessment helps todefine gaps in employee knowledge and motivate them for further learning, while online
platforms and simulations equip them with the right skills, reinforced.
С-Level ExecutivesAs G
se am
ssmS
sim trate
ula gtiam ete
ic gamnol
ed oo
ifi nt Te

Cuhyg rrenien t ueasgement
Engali n

All Employeess k illsetninarng&R e i n f o rc e men

tin geofc
de ybersec
fe nu ri t yse

Cybfor ersec
IT O urity
nline

Pracneli zop
1s

Letl
icab
cyeds P Se
lat cur
fo ityrm

ci adygiearLe

Spe

hrk s
wo
tive velInterac r C-le
fos
ive
cut
ExevelС-Leginin
trativeExecu

300+cybersecurity
skillsrhKaPro spete rsk
ct yionetiv
ac tionrte la
In imuSeryb ntr c mese esss

Our gamified training provides engagement
and motivation through edutainment, while
the learning platforms help to internalize thecybersecurity skillset to ensure that learnt
skills don’t get lost along the way.

All E
mp
loyeesTraining that changes employees’
behavior at every level of yourorganizationtema nesot
Au wareAGeneralistIT4

www.kaspersky.com

2023 AO KASPERSKY LAB. REGISTERED TRADEMARKS AND SERVICE MARKS ARE THE PROPERTY OF THEIR RESPECTIVE OWNERS.

Kaspersky ASAP free trial: k-asap.com
Enterprise Cybersecurity: www.kaspersky.com/enterprise
Kaspersky Security Awareness: www.kaspersky.com/awareness
IT Security News: business.kaspersky.com