CYBERSAFETY
MANAGEMENT GAMES
Immersive learning and motivational experienceto promote cyber-secure decision making by line managers© 2017 Kaspersky Lab. All rights reserved.
1

CONVERTING LINE/ MIDDLE MANAGERS
INTO CYBERSECURITY SUPPORTERS AND ADVOCATES

2

Do line managers

Do they regard

Can they motivate

encourage subordinates tocybersecurity as anemployees to care moreuse cybersafety skills inessential part of business

about security – or they’re

their daily work?

efficiency?

not motivated themselves?

CYBERSAFETY MANAGEMENT GAMESKaspersky CyberSafety Management
Games provide managers withcompetence, knowledge and attitudes
essential to maintain secure working
environment in their divisions.

Covers all major security domains andtypical situations at workplaces.

3TRAINING OUTCOME

For line managers

Understanding

Monitoring

Inner adoption of cybersecurity measures
as an important yet uncomplicated timeconsuming set of actions

Seeing everyday working process
through the cybersafety lens

Cyber-safe decision making

Reinforcement and inspiration

Cybersecurity considerations as an integral
part of business processes

Influential leadership and helpful advice toemployees

4PSYCHOLOGICAL GROUNDS:BUILDING BEHAVIOR BY FIGHTING MISBELIEFS

5

CYBERSAFETY MANAGEMENT GAMES FORMAT

Combines gamification with comprehensive
coverage of security topics, examples,
explanations and exercises,Powered by purpose-build CyberSafety
Management Games software to support easy-tomanage training delivery process,Divided into short modules and runs in 4 hours.

6TRAINING SETUP



20-50 people in a room, split in competinggroups, using training materials – game fields,chips, iPads with CyberSafety Games app,

Teams are walking through the virtual enterprise,
examining every gaming area, encountering all
possible sources of cyberthreats,

Once they discover the particular threat, they
are trained to mitigate it.

7

TYPICAL WORKPLACES AS A LEARNING TOOL

Each workplace contains
12 marked zones

8

POTENTIAL THREATS INDICATED WITHIN THE WORKPLACE

Zones on the map containpotential cyber threats.
10 security domains - AV/Apps,
Data Leak, Mobile, Web, Mail,
Victim behavior, SocialEngineering, Security alerts,
Vigilance skills, Policy breach,Social networking
9GAMIFICATION DRIVES EFFICIENCYParticipants put “casinostyle” bets on all thepotential cyberthreatzones – which meansthat they put theirknowledge and reputation
at stake and win or lose
the highest score in thecompetition.
Alternative mechanics with eliminated gambling environment available.
10

VARIETY OF STUDENTS’ ACTIVITY

Some Zones do contain threats, some don’t.
Sometimes there are paired good/bad Zones from thesame domain.
11

EXERCISES TO SHAPE SAFE BEHAVIOR
For a threat identified,teams propose a set ofactions, which they can doat their workplace to lower
or mitigate a risk and earn
mitigation experience
points.
After the exercise iscompleted, a trainer
explains the best practice
employees should follow attheir desks.

12

EXERCISES TO SHAPE SAFE BEHAVIOR

People make exercises which
help them to make responsiblerisk-taking decisions.
Trainees learn to judge
everyday situations from theview of both businessefficiency and security.

13

EXERCISES TO SHAPE SAFE BEHAVIOR
Software platform offers: step-by-step exercises to mastertechnical skills (f.i., spotting themalicious emails – where to look,what to think, etc.)
 integrating cartoons, live interaction,
 tests,
 theoretical guidance.

14

EXERCISES TO SHAPE SAFE BEHAVIOR
Software platform covers major
technical skills and domains.

It presents people with real-lifesituations, asks for their opinion
and returns a professional advice
on the real security status andrecommended actions “learning-by-doing” concept.

15

EXERCISES TO SHAPE SAFE BEHAVIOR
Students roleplay typicaldiscussions with IT Security. Why dothey always prohibit things
employees want to do? Or maybewe’d better reconsider our manner
when talking to IT Security – to tellour real needs, to explore options
together, etc.

This approach brings tomutually beneficialresolutions, which are both
effective and secure.

16

DELIVERY OPTIONS

17

Kaspersky Lab trainer

Train-the-trainer

Custom scenario

Our certified trainer

License to use the training inside
the enterprise by internal trainers

Based on the customer
cybersecurity environment

Group:

20-50 people, split into teams comprised of 4 peopleRoom:~ 3m2/person, no columns, regular form

Equipment:

Projector (6-8 lumens), Screen, 1 iPad per team + Wi-Fi, Sound system (speakers, microphones(2-3), Flipchart (2) and markers (4 colors each)

Furniture:Tables of participants for 4 people (rectangular size not less than 75x180 cm, or round with nomore than 1.5 m diameter), Participants should sit in groups of 4 at the tables. Table and chair forthe trainer. Chairs on the number of participants.

KASPERSKY SECURITY AWARENESS TRAINING PRODUCTS

Technical training programs for IT Security professionals are also available.
18

CUMULATIVE EFFECT – EACH TRAINING SUPPORTS THE OTHERS

19

EFFICIENCY OF KASPERSKY SECURITY AWARENESS PRODUCTS

up to

not less thanup tomore thanamazing

90%

50%

93%

30x86%

A decrease in a
total number ofincidents

A decrease in amonetary volume ofincidents

Probability of using
the knowledge inthe daily work

ROI from spending
to the security
awareness products

Willingness torecommend theprogram20

WE PROTECT WHAT MATTERS MOST

www.kaspersky.com/awareness21