Name: Once a policy is written, how do you engage employees?
Start: 2015-10-08T14:00:00Z
End: 2015-10-08T14:00:39.000Z
Location: BrightTALK
Rating: 4.3

MetaCompliance is a cyber security and compliance organisation that helps transform your company culture and safeguard your data and values. We create state-of-the art eLearning, GDPR, policy management, incident management and phishing solutions that our clients trust to help them create a better relationship with employees and regulators.

Some industries are pretty good at learning from mistakes- But can the same be said for the realm of information security?

Join Peter ‘The Fraud Guy’ Taylor, and Robert O’Brien, as they the lessons learned from previous security lapses to fortify our defences and safeguard our valuable information.

During this 45-minute webcast we explore:
- The contrast between old-school digital fraud and modern cyber security roles
- Shifts in criminal operations on the dark web
- The evolution of insider threats in the digital age
- Key takeaways from history to enhance future information security

Cyber Fraud: Same As It Ever Was

83% of organisations fail to deliver cyber security training that engages employees.

Employee engagement determines the success or failure of a cyber security training program. Without engagement, organisations cannot build a robust culture where security is front of mind.

Join us on our upcoming webcast, 'Level Up Your Cyber Security Training with Netflix Style E-Learning', and explore MetaCompliance’s latest eLearning series, Cyber Police, and the power of storytelling in enhancing employee engagement in cyber security education.

Level Up Your Cyber Security Training with Netflix Style E-Learning

Your staff’s split-second decisions, like clicking an innocent link, could be the unsuspecting gateway to a security nightmare!

Join Christian Hunt and Robert O'Brien as they delve into effective strategies aimed at shaping staff security behaviours and mitigating the risks associated with security missteps.

This 45-minute webcast will discuss:
• The intricacies of human behaviour and why people make the choices they do.
• Common pitfalls in cyber awareness training and techniques to guide staff towards the correct choices.
• Behavioural science strategies to fortify your security measures.
• The role of senior leadership in setting an example.

Choices Choices: Behavioural Science and Cyber-Compliance

Step into the future with our upcoming webcast as we delve into the intricacies of defence strategy in the age of AI and automation. 

In this 45-minute session, we will navigate through the challenges that lie ahead, shedding light on the indispensable role played by those entrusted with the security of our organisations and societies.

Explore:

• The looming threat posed by Gen-AI and deepfakes.
• The positive aspects of generative AI and its potential benefits.
• Who is responsible for confronting and mitigating these evolving risks.
• The critical role of a CISO in safeguarding against emerging threats.
• Best practices to fortify against the ever-changing landscape of cyber threats.

Cyber Shock Absorber or Sin Eater? A Cyber Security State of the Nation for 2024

Looking for a fresh approach to your cyber security awareness programs? Tired of the same dull, monotonous content that seems to be forgotten as soon as it's heard? 

The potential power of humour in communication is immense; if you can make your audience laugh, you can make your message stick.

Join us for our upcoming webcast where we explore how you can best employ outside-the-box strategies like humour to make sure your cyber security messages hit home and stay there. 

This 45-minute webcast will discuss:
• Why traditional cyber security awareness training often fails to leave a lasting impression.
• How to leverage humour effectively to foster engagement with cyber security awareness.
• Nailing the comedy element: Insights on what works and what falls flat.
• The compelling role of storytelling in crafting memorable security messages

Outside-The-Box Strategies For Cyber Security Engagement

Despite increased investment in cyber security initiatives, organisations continue to be impacted by cyber attacks. Almost all successful breaches share one variable in common: human error. The reality is organisations face a very real danger of threat from within.

Against the backdrop of a complex cyber threat landscape, the insider threat has intensified as working practices have evolved and cybercriminals launch increasingly sophisticated attacks.

The mitigation of human-born error is key to reducing cyber risk in an organisation and a proactive approach to prevent employee-related threats has never been more important.

Our upcoming webcast titled, ‘Cyber Security: Is the Nightmare Between the Chair and the Keyboard?’, explores the human dimension to cyber vulnerabilities and solving cyber security’s people problem. 

This 40-minute webinar will discuss:
• Why people are at the centre of cyber security threats
• How hackers exploit people for their own gain
• Tactics to improve employee engagement in Security Awareness Training
• The CISO’s challenge in creating a cyber secure workforce

Cyber Security: Is the Nightmare Between the Chair and the Keyboard?

In today’s ever-evolving cyber security landscape, one-size-fits-all cyber security training falls short of adequately preparing employees to tackle escalating cyber threats. 

Tailored learning empowers employees by delivering relevant, role-specific knowledge that enhances their skills and bolsters an organisation’s security posture. 

Join us for our upcoming webcast, ‘Unleashing The Power of Tailored Security Awareness’,  where we delve into how customised cyber security training can foster a culture of continuous learning, ensuring that their employees remain at the forefront of cyber security best practices.

This 50-minute webcast will discuss:
• The constraints of generic training
• Tackling engagement challenges in cyber security
• Recognising distinct departmental needs and risks
• Cultivating a culture of security-first across the organisation
• Valuable insights for crafting personalised training programs

Unleashing the Power of Tailored Security Awareness

In today's digital age, where threats evolve at a pace like never before, the importance of cyber attack simulations is paramount. They serve as crucial tools for organisations to proactively discover vulnerabilities, enhance their incident response strategies, and fortify defences against emerging cyber threats.

Join us for our upcoming webcast, 'Conducting Effective Cyber Attack Simulations,' where we delve into the crucial aspects of attack simulation and incident management in today's rapidly evolving digital landscape.

During this webcast, we will explore the following key topics:
• Understanding the importance of attack simulations
• Unveiling the intricacies of authentic attack simulations
• Building the foundation for success
• The role of ongoing cyber awareness training
• Practical insights into conducting table-top exercises

Conducting Effective Cyber Attack Simulations

Cyber Security Awareness Month, celebrated every October, helps to highlight the importance of cyber security and the collective effort required to prevent cyber attacks.

However, a month-long initiative is not enough to make a real, long-lasting impact on staff security behaviours. 

Our upcoming webcast, ‘Best Practice for Cyber Security Awareness Month’, explores how organisations can make the most of Cyber Security Awareness Month and keep security top of mind all year round. 

This 40-minute webcast will discuss:
• Cyber fatigue and the difficulty of engaging users
• Tips for planning Cyber Security Awareness Month
• Maintaining momentum and employee engagement throughout the year
• Ongoing cyber awareness certifications
• Thinking outside the box when it comes to cyber initiatives

Best Practice for Cyber Security Awareness Month

Verizon's 2023 DBIR reveals that, 74% of all breaches involve the human element. As technology advances, cybercriminals are shifting their focus from exploiting system vulnerabilities to targeting human ones.

Our upcoming webcast, 'Hacking 101: Mitigating Human Vulnerabilities,' delves into why humans are often labelled as the 'weak link' in an organisation's cyber security and shares effective strategies to bolster this risk. 

This 50-minute webcast will discuss:
• Real-world examples of how human vulnerabilities are exploited. 
• The power of personalised Security Awareness Training.
• Securing C-Suite buy-in for cyber awareness campaigns.
• Are humans truly the weakest link in cyber security?

Hacking 101: Mitigating Human Vulnerabilities

Cyber attacks are becoming increasingly sophisticated and frequent, making it critical to adopt a proactive approach to cyber security.  

Join our upcoming webcast, ‘How to Make Offensive Security your Cyber Defence Superpower’ and explore how you can identify and remediate security vulnerabilities before they can be exploited by attackers. 

During this 45-minute webcast, we’ll cover:
• Understanding the concept of offensive security and why it’s crucial for cyber security.
• How to integrate offensive security to bolster your defence against threats. 
• The often-overlooked importance of physical security.

How to Make Offensive Security your Cyber Defence Superpower

Privileged Accounts = Targeted Accounts.

Once compromised, these privileged credentials give hackers the "keys to the kingdom," allowing them to gain access to your most sensitive and critical information.

Join our upcoming webcast, ‘Privileged User Awareness: The Keys to the Kingdom’ and learn the steps you can take to secure privileged user accounts and mitigate risks. 

During this 45-minute session, we will cover:
• The problem with privileged user accounts
• How cybercriminals target and exploit privileged users 
• The steps organisations can take to mitigate risks

Privileged User Awareness: The Keys to the Kingdom

The speed at which technology and cybercrime rapidly evolve makes it increasingly difficult for organisations to remain cyber-secure and compliant. 

Consequently, the need to implement effective Information Security frameworks has heightened. With these frameworks in place, organisations can define the processes and procedures to assess, monitor, and mitigate cyber risk. 

Our upcoming webcast, ‘Business Benefits of Information Security Frameworks’, explores the business value of Information Security frameworks and how to build a robust cyber security strategy. 

This 45-minute webcast will discuss:
• The why and what of standards, regulations, policies, and frameworks
• Business benefits associated with Information Security frameworks 
• Pitfalls to watch out for when engaging with Information Security frameworks
• How to best approach ISO 27001 certifications

Business Benefits on Information Security Frameworks

In today’s complex business environment, organisations need to be able to respond rapidly to any changes and adapt policies where necessary. The only way to adapt to the dynamic, disrupted, and distributed nature of business is to be agile.

This requires organisations to have an agile policy management program in place so they can react quickly to changes in risks, regulations, strategy, processes, roles, and responsibilities.

An effective policy management program will provide a framework of governance, identify risks, define compliance, and play a crucial role in organisational success. It should also engage staff and clarify the standards of what is expected of them.

The 40-minute webcast will explore:
• How to monitor the internal and external environment for changes that impact policy.
• Key steps to defining a policy management program that is agile and dynamic to the needs of the business.
• Engaging employees on policies to ensure they know what is expected of them.
• How to ensure policies are being followed and aligned with the needs of the business.

Key Steps to Implementing an Agile Policy Management Program

Whether accidentally or deliberately, employees can put organisations at significant risk of a cyber attack. The task of defending against such threats is difficult because insider threats are often difficult to detect. 

The pandemic and the shift to remote working have contributed to the growing rate of insider threats in recent years and will continue to be an ongoing challenge for organisations. 

Our upcoming webcast ‘Insider Threats: The Dangers Within’ explores the types of insider threats that can impact your organisation and how to protect against risky employee behaviors from the careless to the malicious.

This 45-minute webinar will discuss:
• Internal threats versus external threats
• Types of insider threats and their motivating factors
• The risks that insiders pose
• How to protect your organisation by detecting, deterring, and disrupting insider threats

Insider Threats: The Dangers Within

Social engineering takes many forms, but email continues to be the most attractive attack vector for hackers to get a footing into our personal and professional lives.

In our upcoming webcast, "Could Social Engineering Exist Without Email," we will examine why email remains a favored target for malicious attacks and explore ways for organisations to fortify their defences.

During this 45-minute webcast, we will cover:
• The story of social engineer and email prankster, James Linton.
• The reasons why email is a prime target for exploitation.
• Best practices for conducting phishing simulations and avoiding a shame culture.
• Strategies for creating effective email awareness campaigns that engages users.

Could Social Engineering Exist Without Email?

The effectiveness of a Security Awareness Training program in ultimately depends upon improving the security behaviours of staff. 

However, security training alone will not change employee behaviours. Until and unless awareness training affects how staff feel about the need to secure information, and their security instincts, organisations will continue to be vulnerable to cyber risk. 

Our upcoming webcast ‘Beyond Awareness Training: Cultivating A Security Culture’ explores why organisations must go beyond awareness training and instil a security mindset that transforms staff into their frontline defence against cyber attacks. 

This 45-minute webcast will discuss:
• Changing how staff perceive, think, and feel about information security
• Ingraining default security behaviours that point staff towards the right course of action
• Understanding the “why” and communicating this across the board
• Embedding a security subculture into the organisational culture
• Knowing your audience and making culture-change stick

Beyond Awareness Training: Cultivating a Security Culture

This webinar explores the best practices for distributing policies, determining when and how to provide education and how to build awareness campaigns.  We often think that once a policy has been formally issued the job is done, but that is far from the truth.  Properly communicating the policy is only the start.  

Attendees will learn the challenges, best practices, and benefits of a well thought out policy communication plan. 
Register now to join IT GRC industry expert, Michael Rasmussen as he discusses best practices in policy awareness and communication.
Learning Objectives: 
- Define the key parts of a policy communication plan
- Identify methods for tracking and delivering training and attestations
- Determine ways to enable employee access to policies and related materials
- The role of training and education
- The policy portal – delivering an interactive employee experience for policy management
- Getting employee questions answered
- Attestations, read and understood, certifications
- How technology enables employee engagement on policy

Once a policy is written, how do you engage employees?

Compliance

Policy

Management

Policies

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

The unexpected nature of natural disasters and other disruptive events means that preparation is key to managing disaster recovery and business continuity planning. Join the business continuity and disaster recovery community for live and recorded presentations discussing best practices for business continuity planning, disaster recovery programs and business continuity management. Learn from BCDR experts to develop your critical infrastructure and gain insight into tactical solutions to your BCDR issues.

Business Continuity / Disaster Recovery

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Information Technology

Get powerful learning and development insights from influential experts. Connect with thought leaders and colleagues to get the most up-to-date knowledge in the field.

Learning and Development

Human resources is intrinsically linked to business success and requires a thoughtful balance of a variety of complex issues. The human resources community on BrightTALK is made up of thousands of professionals in human resources exchanging human resources best practices and advice. Watch hundreds of on-demand webinars for immediate information or participate in upcoming live webinars and have your questions answered by respected HR thought leaders.

Human Resources

Internal audit and compliance professionals are facing increasingly stringent regulatory requirements when it comes to compliance reporting and internal control procedures. Join the audit and compliance community to learn best practices from thought leaders on topics such as regulatory compliance, internal audit checklists and audit program strategies.

Audit and Compliance

The accounting and finance community on BrightTALK features presentations from leading accountants and finance professionals. The accounting community includes tax planning strategies, QuickBooks webinars and other accounting webinars, while the finance community features presentations on financial capital regulations and forensic data analytics. Join the conversation by attending live financial and accounting presentations and connecting with industry thought leaders.

Once a policy is written, how do you engage employees?

Presented by

About this talk

More from this channel