Kaspersky
Interactive
Protection
Simulation

Build cybersecurity
awareness among
top managers anddecision-makers

Learn more atkaspersky.com/awarenessKaspersky Interactive Protection Simulation
The “people problem”
One of the biggest security challenges facedby businesses today is that different senior
management roles view cybersecurity fromdifferent perspectives, and have different
priorities. This can result in a sort ofdecision-making “Security Bermuda Triangle”:• Businesses see security measures• as being contrary to their business goals(cheaper/faster/better).
• IT Security Managers may feel thatcybersecurity as an infrastructure andinvestment issue is outside their remit.
• Managers tasked with cost control may
not see how cybersecurity spending
relates to revenues and saves rather than
generates cost.
Mutual understanding and partnership
between these three are crucial for effective
cybersecurity. However, traditionalawareness formats, like lectures and red/
blue exercises, are flawed: lengthy,
overtechnical, and unsuited to busy
managers, and they fail to build a “common
language”.

A company’s cyber-immunity starts
with the C-suites
For many companies today, looking after the sustainability of their IT infrastructure isa priority. However, dealing with cybersecurity issues is usually the responsibility of IT
and IT security staff, which can create a fragmented culture of cybersecurity behavior
within the business. Business leaders focus primarily on sales, customer experience,risks and costs, and often overlook cybersecurity as they work to achieve their goals.
But without the support of the board, leading by example, creating a unified culture ofcybersecurity can be unattainable.
76% of CEOs admit to bypassing security protocols to get something done faster,
sacrificing security for speed*.
62% of managers admit that miscommunication regarding IT security within theirorganization led to at least one cybersecurity incident**.
51% of Information Security workers find talking about increasing budget for IT security
most difficult…. but they’re on the same page when it comes to workable communication
strategies.
The majority of C-level (56%) and IT (48%) workers agree that providing real-life
examples is the most efficient method to ease communication on IT security related
issues**.

How Kaspersky Security Awarenesshelps
Kaspersky Security Awareness is a proven, efficient and effective solution with a longstanding international track record of success.. Used by businesses of every size totrain over a million employees across more than 75 countries, the solution brings
together more than 25 years of Kaspersky’s experience in cybersecurity with the
Kaspersky Academy's extensive experience in adult education.
The portfolio is made up of engaging training products that increase thecybersecurity awareness of your employees at every level, empowering them to playtheir part in the overall cybersecurity of your organization.
Each product in the portfolio plays a specific role in the overall learning cycle – and isalso available independently.

A strategic cybersecurity businessgame for executives
Kaspersky Interactive Protection Simulation (KIPS) is a strategic businesssimulation, a team game that demonstrates the connection between businessefficiency and cybersecurity.
Participants are placed in a simulated business environment as members of the IT
security team, where they’re faced with a series of unexpected cyberthreats while
having to keep the company running smoothly and earning revenue.
They must build a cyber-defense strategy by choosing from the best proactive andreactive controls available to them. Every choice they make changes the way the
scenario plays out, and ultimately affects how much revenue the company does – ordoesn’t – make.
* https://www.forbes.com/sites/
louiscolumbus/2020/05/29/cybersecuritysgreatest-insider-threat-is-in-thec-suite/?sh=466624f87626** https://www.kaspersky.com/blog/speakfluent-infosec-2023/

Balancing engineering, business, and security priorities against the cost of a realistic
cyberattack, the teams analyze data and make strategic decisions based on uncertain
information and limited resources. If this sounds realistic, it’s because all the scenarios
are based on real-life events.

1

KIPS is a dynamic awareness game with a“learning by doing” approach:• Fun, engaging and fast (2 hours).
• Teamwork builds cooperation.
• Competition fosters initiative & analysis
skills.
• Gameplay develops an understanding ofcybersecurity measures.
• All scenarios and attacks are based onreal-life cases

Why KIPS works
KIPS training is aimed at business system experts, IT people and line managers, toincrease their awareness of the risks and security problems involved in running modern
computerized systems.
Each team of 4-6 people is tasked with running a business that involves production
facilities and computers controlling them. During the game, the production facilities
generate revenue, public awareness, and business results. At the same time, the teams
must deal with the cyberattacks threatening to impact the business’s performance.
At the end of the game, players will have gained important and actionable insights thatthey can apply in their work.
• Cyberattacks hurt revenue, and must be addressed by top management• Cooperation between IT and non-IT decision-makers is essential for effective
cybersecurity within every business• An appropriate security budget won’t break the bank, but lost revenue as a result ofa successful cyberattack can…
• People quickly become comfortable with security controls and their importance(audit training, anti-virus, etc.).

KIPS is available in two flavors:
The very popular KIPS Live option creates an atmosphere of excitement andenthusiasm, and is a great tool for engaging and building a culture of cybersecurity
within an organization.
In the KIPS Online version, users can interact with a large number of participants from
wherever is convenient for them.
Perfect for global organizations or public activities, KIPS Online can be combined withKIPS Live to add remote teams to the on-site event.
• Up to 300 teams (= 1000 trainees) simultaneously, from any location.
• Different teams can choose a game interface in different languages.
• Customers can personalize pre-installed scenarios by determining the number andtypes of attacks in the game from the library.
• Customers with a license that allows them to play KIPS as often as they like during
the license period can play with the predefined settings, or personalize the gamescenario every time they play, choosing and combining different attacks fromthe library. This functionality changes the game every time, making it even moreinteresting.
• Another benefit of the online version is getting statistics on the players’ choices,
data about teams’ actions in certain situations and a benchmark of player actions inrelation to the previous game.

2

KIPS shows:• The role cybersecurity plays in business
continuity and profitability.
• The emerging challenges and threats
faced by businesses.
• The typical mistakes companies makewhen building their cybersecurity.
• How cooperation between business andsecurity teams helps to maintain stable
operations and sustained protection
against cyberthreats.
Depending on the scenario, the teams are
responsible for the IT security of thecompany in that industry. Their task is toensure the normal, uninterrupted functioningof the company, maintain relationships withcustomers and suppliers, and find andneutralize cyberthreats.
As the enterprise comes under cyberattack,the players experience the impact on
production and revenues, and learn to adopt
different business and IT strategies andsolutions to minimize the impact of the attack
without losing revenue.

Enterprise KIPS scenarios
for all vertical sectors
Сorporation

Bank

HQ
SIEM
VPN

DSS
ERFÜLLT

v.4.0

Protect the enterprise from ransomware,
APTs, automation security flaws.

Protect financial institutions from highlevel emerging APTs, like Tyukpin,
Carbanak.

Oil & gas

Local public administrations
KIPS

Kaspersky
Interactive
Protection
Simulation

GDPR FOR LOCAL PUBLIC ADMINISTRATIONS

DMZ

VPN

OUTSOURCER
CONTRACTORWEB SERVER

APPLICATIONSERVERFEDERAL SERVICES
E-СOMPLAINTS

PUBLIC
VPN

VPN

LPA

The team that finishes the game with themost revenue, having found and analyzed all
the pitfalls in the cybersecurity system andresponded appropriately, WINS!

IT DEP.

PROXYFRONT DESK
E-TENDERSEMAIL SERVER

MANAGEMENTCIVIL SERVICESURBAN DEVELOPMENT
SOCIAL SERVICES

CITIZENS DBTAXESCORPORATE SERVICESBACKUP SERVER

OFFICE NETWORKThis project receives funding from the
EU_H2020 Research & Innovation Programme
under grant agreement 740712.

v.4.0

Explore the impact of a variety of threats –from website defacement to a realransomware and a sophisticated APT.

Protect public web servers fromattacks and exploits.

Power station

Water plant

HEAT RECOVERY UNIT

7,9

15,0
HEAT RECOVERY UNIT

13,9

8,4

7,2

OIL

3,1

Protect industrial control systems andcritical infrastructure from Stuxnet-style
cyberattacks.

Protect the IT infrastructure of a water
purification plant, ensuring the stabilityof two production lines.

Petroleum holding

Petrochemical industry

Preserve cybersecurity to protect the revenueof a global Oil&Energy company with offices
across the world.

Ensure the normal functioning of the
new branch of a large petrochemical
holding that focuses on ethylene
production.

3

Transportation
KIPS

AirportKaspersky
Interactive
Protection
Simulation

Protect logistic companies from Heartbleed,
APT, B2B Ransomware, Insider.

Ensure the safety of passengers andtimely delivery of goods at the airport,
protecting its assets from numerous
cyberattacks and threats.

Technical attribution

Small & Medium Business

Investigate and conduct a technicalattribution of a complex APT attack on
UN servers.

Help SMBs protect their businesses
from cybersecurity threats related to
DDoS, Ransomware, Mobile App hackand Identity theft.

TelecomProtect the assets of a large telecommunications
holding consisting of a telecoms provider,a cloud service provider, a game developer andthe HQ.

Want to get even more out of KIPS?
Why not round-out your KIPS experience with Executive Training, part ofKaspersky’s Security Awareness portfolio? This training for managers can be taken before
or after you’ve played KIPS, depending on your Security Awareness approach. Boost your
KIPS experience by discovering what the current threat landscape means for your business,
what actions to take in the event of a cyberattack, plus a host of other interesting, relevant
and useful information. (Executive Training comes in two formats: an interactive offline
workshop or via online сourse)4

What KIPS users and customers say
about the game
The Kaspersky Industrial Protection
Simulation was a real eye-opener and should
be made mandatory for all security
professionals.
Warwick Ashford,
Computer Weekly

We at CERN have a huge number of IT andengineering systems, with thousands ofpeople working on them. Thus, froma cybersecurity perspective, increasingawareness and engaging people to takecare about cybersecurity is as crucial as thetechnical controls. Kaspersky training
proved to be engaging, bright and efficient.
Stefan Luders,
CERN CISO

It was truly eye-opening and a number of theparticipants asked about using this game attheir companies.
Joe Weiss PE,
CISM, CRISC, ISA Fellow

We have to build a network of people basedon affiliation and cooperation and the KIPS isa perfect way how to kick it off.
Daniel P. Bagge,
Národní centrum kybernetické
bezpeč nosti, Chezh Republic

References and case studies
KIPS Game was played by industrial security professionals from 50+ countries.
• KIPS has been translated into English, Russian, German, French, Japanese, Spanish
EU, Spanish LA, Portuguese, Turkish, Italian, Chinese, Dutch, Arabic;• KIPS is used by numerous government agencies, including CyberSecurity Malaysia,
the Czech Republic ‘s NSA, and Cyber Security Centrum in the Netherlands,
boosting critical infrastructure awareness for hundreds of experts within national
critical infrastructure organizations• KIPS is licensed by leading education authorities such as the SANS Institute, where it
is used in training for SANS students worldwide• KIPS is licensed by security service providers and vendors, including MitsubishiHitachi Power Systems where it’s used in training for critical infrastructure customers• KIPS is a part of the European Commission’s Geiger project to train and protect small
and micro enterprises from cyberthreats and improve their privacy management

Train-the-trainer available
If a customer wants to use KIPS to train a broader audience – a large number of
employees, managers and experts from multiple departments or sites – it may be useful
to purchase a license for KIPS training, to educate internal trainers and run KIPS sessions
at the customer’s own pace and convenience.

This type of license includes:• The rights to use the KIPS training program internally.

How to prepare for a KIPS session
Schedule: Plan KIPS as a separate event or
session within an existing event/ conference/
seminar (in this case, the optimum time for
KIPS is on the evening of the first day).
Group: 20–100 people, split into teams of
3–4 people, ideally each team is a mix ofpeople from Management, Engineers, CISO/
IT Security:• it’s best to have at least 1 member fromeach role/function,• teams may consist of people fromdifferent or the same company/
department,• it doesn’t matter whether or notparticipants know one another.
Setup: The game takes 1,5 – 2 hours, but theroom must be available to Kaspersky’s
facilitator team for 2 hours prior to the gamefor preparation and setup.

• A set of training materials and the rights to use/reproduce it.
• Login/password for the KIPS software server for the duration of the license .
• Trainer’s guide, education and training for program leaders on how to run andconduct KIPS training.
• Maintenance and support (updates and support for KIPS software and training
content).
• Optional customization of KIPS Scenarios (an extra fee applies).

KIPS for partners and training centers
KIPS is a great opportunity for partners to benefit from Awareness solutions
in a variety of ways. Not only can they sell it as a product – they can also sell itto their training center customers, or even conduct the sessions themselves.
(Kaspersky’s training specialists can upskill the partners for training if they choose that
option.)

Room: Plan ~3m2/person, no columns,
standard AV Equipment: Projector (6–8
lumens), Screen, Sound system (speakers,
remote control, microphones).
Wi-Fi with internet access (for access to
KIPS game server), from 4Mbps iPad pereach team (4 persons) with Wi-Fi support
or other tablet.
Furniture: Tables of participants for
4 people (rectangular size not less than
75x180 cm, or round with no more than 1.5 m
diameter), Participants should sit in groupsof 4 at the tables. Tables for co-host, chairs
for all participants.

5

Kaspersky Security Awareness –a new approach to mastering IT
security skills– Why do I needthis?
– Cognition

Starting point

Learning

Reinforcement– Am I aware?
– What do I know
and where are
the gaps?

– Micro learning– Continuous
learning– Adaptivity– Did I get it right?
– Do I remember this?
– Do I act accordingly?

Different training formats
for different organizational levels
С-Level Executive
s

ve
cti n
ra latioet
In imuSs k il

ls

li z

e

op

li n

nin

arn

g&

en

t

in g

eo

fc
de ybersec
fe nu ri t yseCyb
for ersec
IT O urity
nline
Ge
ner
alist
IT

R e i n f o rc e m

Pr

ne

ci a
t

Le

ic
a ct

al

b
cy

e

d
s P Selat cur
fo ity
rm

ar

Le

Spe

h
rk s
wo
tive velInterac r C-le
fo

g
inin
tra
tive
Execu

s
ive
cut
Exe
vel
С-Le

d

te
ma s
to reneu
A wa
A

All Employees

gementEnga

300+
cybersecurity
skills1s

6

Cu
hyg rrenien t ueaseryb ntr c mese esss

am e
te
ic gamnoled oo
ifi nt T
e

As G
se am
ss
m

yg
ie

Our gamified training provides engagement
and motivation through edutainment, while
the learning platforms help to internalize thecybersecurity skillset to ensure that learnt
skills don’t get lost along the way.

Engagement/
motivationrhTraining that change
employees’ behavior
at every level of yourorganization

Continuous learning cycleS
sim trateula gti

25+ years’ experience in cybersecurity
transformed into a cybersafety skillset
that lies at the heart of our products.

Ka
Pro spete rskct yionSubstantial
cybersecurity
expertise

Because sustainable changes in behavior take time, our approach involves building acontinuous learning cycle that incorporates multiple components.
Game-based learning engages senior management, turning them into advocates ofcybersecurity initiatives and supporters of building a culture of cybersafe behavior.
Gamified assessment helps to define gaps in employee knowledge and motivate themfor further learning, while online platforms and simulations equip them with the rightskills, reinforced.

All E
mp
loy
ees

Key program differentiators

www.kaspersky.com© 2023 AO KASPERSKY LAB. REGISTERED TRADEMARKS AND SERVICE MARKS ARE THE PROPERTY OF THEIR RESPECTIVE OWNERS.

Enterprise Cybersecurity: www.kaspersky.com/enterprise
Kaspersky Security Awareness: www.kaspersky.com/awareness