Security culture and training
We know how to promote security as everyone's responsibility.
In order to reduce risk, we can offer employees awareness and training in secure behavior. We also know that people's time is precious, and they are not always available for learning something new.
And if it is difficult to capture their interest and attention, there is little basis for any training effort to change their behavior.
How we communicate any security training content is crucial, how relevant it is perceived by people, and how well the message is rooted in the organization – including management.
Moreover, internal security policies must be both comprehendable, reasonable and possible to comply with for everyone. Helped by good products which are configured well, we can further reduce the friction caused by required attention and extra work – which people experience by staying on the safe side.
Our methods are based on empathy, which takes into account that people are different, and most are not as interested in security as ourselves.
Through dialogue with employees, we can uncover the state of knowledge and compliance in your organization. Having practical experience with ISO 27001, we can help internal audits become a positive resource for many people in the enterprise, while policies are supported by approporiate technical measures wherever possible. Through implementation of our unique products, we can further reduce human risk.