AI and increasingly sophisticated cyber attacks are redefining the landscape of digital threats. Businesses like our client understand that cybersecurity must go beyond technology. While software and firewalls form the core of many defenses, true resilience depends on empowering employees to recognize and counteract security risks actively. Faced with a growing need to strengthen security awareness across diverse teams, our client partnered with us to build an interactive training program that could make complex cybersecurity principles both accessible and memorable. This hands-on approach – using virtual reality, escape games, and real-world scenarios – engaged 300 employees and inspired a lasting shift in security culture. Here’s how our client successfully fostered a workforce that’s equipped to be a proactive line of defense against modern cyber threats.
Key Challenges & Context
Our client, a cooperative bank within a major financial group, serves over a million customers across Europe, Southeast Asia, and the South Pacific, managing sensitive financial data in each region.
The challenge lay in creating a training program that would go beyond passive awareness sessions. They needed an interactive experience that could resonate with employees of different technical backgrounds, teaching them key cybersecurity principles while encouraging lasting behavioral changes.
By making the training immersive and accessible, they aimed to instill an enduring awareness of security risks, foster teamwork, and establish a proactive security culture throughout the organization.
Approach
To address the need for an impactful and engaging cybersecurity training program, we designed a multi-layered approach that emphasized interactive learning, adaptability, and real-world relevance. Each element of the training was crafted to ensure employees would not only retain key security practices but also feel empowered to apply them in their daily work environments. The three-hour sessions were structured around immersive activities, with each one targeting a distinct aspect of cybersecurity.
Our program included three core activities:
- Virtual Reality Experience: This activity placed participants in a simulated environment where they assumed roles that allowed them to explore security breaches from an insider’s perspective. Employees could witness firsthand how seemingly minor actions could lead to security vulnerabilities, emphasizing the importance of vigilance and secure behaviors.
- Escape Game: The Escape Game was designed as a collaborative challenge, where employees worked in teams to solve security-related puzzles and overcome obstacles under a time constraint. This exercise reinforced critical thinking and teamwork while demonstrating the creativity and persistence that hackers often employ, helping employees better anticipate and counteract potential threats.
- Presentation on Hand-picked Cybersecurity Themes: In response to client feedback, we expanded the presentation session to cover Open-Source Intelligence (OSINT) topics, illustrating how publicly available information could be exploited. This session highlighted real-world methods for data gathering and the potential vulnerabilities posed by freely accessible information, broadening employees’ understanding of cyber threats and data protection.
To sustain the impact of the training beyond the sessions themselves, we implemented additional measures that kept cybersecurity awareness visible in the workplace:
- Custom Posters and Stickers: We equipped the offices with cybersecurity-themed posters and stickers, strategically placed to serve as daily reminders of the security practices covered in training.
Benefits
The cybersecurity training program delivered measurable and impactful benefits, reinforcing a culture of vigilance across its workforce and providing employees with the skills needed to counteract potential threats effectively. Feedback from the sessions highlighted the program’s value, both in terms of participant satisfaction and practical outcomes for the organization.
Key benefits included:
- High Satisfaction and Engagement: Employees responded positively to the immersive format, with satisfaction scores reflecting the program’s effectiveness (whopping 4.20/5 overall satisfaction score). This high rating underscored the training’s success in making cybersecurity concepts engaging and accessible, motivating employees to fully participate.
- Increased Awareness and Behavioral Change: Many participants indicated their willingness to adopt better cybersecurity practices, particularly around password security. The hands-on approach provided them with concrete strategies they could immediately implement.
- Sustained Engagement with Visual Reinforcement: To keep cybersecurity top of mind, we displayed posters and stickers around the office. These visual cues served as daily reminders of best practices, promoting an ongoing security focus even after the training sessions concluded.
By combining practical training with continuous reinforcement, our client successfully created a cybersecurity-aware workforce equipped to recognize, prevent, and respond to threats—ensuring that security practices became an integral part of daily operations.
