{"id":16199,"date":"2021-06-17T16:38:23","date_gmt":"2021-06-17T13:38:23","guid":{"rendered":"https:\/\/www.talentlms.com\/blog\/?p=16199"},"modified":"2024-02-01T15:01:07","modified_gmt":"2024-02-01T13:01:07","slug":"cybersecurity-training-for-employees","status":"publish","type":"post","link":"https:\/\/www.talentlms.com\/blog\/cybersecurity-training-for-employees\/","title":{"rendered":"Cybersecurity training: How to engage learners"},"content":{"rendered":"

Cybersecurity training is like going to the dentist. We know it\u2019s necessary for our own good and we appreciate the results. But the process itself? It can range from tedious to uncomfortable to feeling like we\u2019re pulling teeth. (And that’s as far as we\u2019re willing to go with this analogy.<\/em>)<\/p>\n

Yet the fact that cybersecurity training is not a favorite training subject, or even a top priority for most employees, can have serious consequences. Because unlike going to the dentist which is a passive experience, cybersecurity training for employees is an active experience<\/strong> \u2014 as all training should be in order to have an impact. When people are bored, confused, or overwhelmed, they tend to check out. And that\u2019s when mistakes happen.<\/p>\n

According to the latest TalentLMS survey regarding the state of cybersecurity training, 61% of employees who took cybersecurity training failed a basic test<\/strong><\/a>. This is not great. It basically means that more than half of your team members can inadvertently expose your company to security risks.<\/p>\n

So how do you ensure your investment in cybersecurity training actually does what it\u2019s supposed to? You need to learn how to keep learners hooked. But first, you should figure out the reasons your employees disengage from their training.<\/p>\n

Why cybersecurity training turns employees off<\/h2>\n

There are several reasons why employees are disengaged during cybersecurity training:<\/p>\n

The language is too technical<\/h3>\n

To retain information, one needs to first understand<\/em> the information they\u2019re absorbing. Yet cybersecurity training for employees tends to be chock-full of industry jargon.<\/p>\n

Making your employees sit through a training session where they struggle to understand half the words involved not only is discouraging for them, but it\u2019s also ineffective.<\/p>\n

Employees don\u2019t see how it relates to their job<\/h3>\n

Most employees view cybersecurity training as something that\u2019s very unlikely to come in handy on a daily basis or to affect their work in any way.<\/p>\n

But this assumption is sadly not accurate. With the rise of remote work due to the COVID-19 pandemic, ninety percent of companies faced an increase in cyberattacks<\/strong><\/a>. If anything, cybersecurity awareness training has now become more relevant than ever.<\/p>\n

It\u2019s mandatory training \u2014 which makes it feel like a chore<\/h3>\n

Employees do enjoy training, for a number of different reasons. But the training they enjoy the most is usually on subject matters they have an interest in, or in soft skills they believe will help them grow both personally and professionally.<\/p>\n

Much like compliance training, the mandatory nature of cybersecurity training can make it feel like a chore if not handled properly.<\/p>\n

Learners believe they already know enough<\/h3>\n

It\u2019s an interesting conundrum: because most employees work with a computer on a daily basis, they think they already know everything they need about how to use it. This gives them a sense of security that, according to the results of the TalentLMS survey, is a false one.<\/p>\n

In fact, 74% of respondents who answered every single question of a simple cybersecurity test incorrectly, report feeling safe from cybersecurity threats<\/strong><\/a>.<\/p>\n

\n

Don’t just tick boxes \u2014 deliver training that works
\n<\/strong><\/span>Build online courses and track performance with TalentLMS.
\nThe training platform that users consistently rank #1.<\/span>\"Create<\/a><\/p>\n

\n

Do we need to keep employees engaged during cybersecurity training?<\/h2>\n

TLDR; Yes, we do.<\/strong><\/p>\n

Cybersecurity training, like any other training, is only effective when employees are present and engaged for its duration. If you (and by extension, your employees) view cybersecurity training as a box you tick once and forget, it\u2019s as if you didn\u2019t deliver said training at all<\/strong>.<\/p>\n

Consider the following scenario: Joan, from accounting, takes cybersecurity training online along with the rest of her remote coworkers. The training video is long, filled with technical terms, and Joan is not given the opportunity to ask questions or retake the course.<\/p>\n

So, after dutifully watching the video to the end, she goes back to her usual tasks. Next time the accounting software system she uses asks her to change her password, Joan does what she\u2019s always done: she chooses a password she\u2019s used in other instances so that she can remember it easier. To ensure she\u2019s typing it properly, she opens her browser, where she has stored all her other passwords.<\/p>\n

Joan is not alone. In the TalentLMS survey, 33% of employees said they store their passwords in their browsers<\/strong>. This practice is far riskier than most people realize.<\/p>\n

\"Cybersecurity<\/a><\/p>\n

In our scenario, this would make it possible for anyone who has access to Joan\u2019s computer (physically or remotely), to open the browser and view all her passwords, including that of your accounting software. That person would then have access to your company\u2019s payroll and to all sorts of sensitive data from clients and employees alike.<\/p>\n

If Joan had received better cybersecurity training, delivered in a way that would have kept her engaged and would have helped her understand and retain information, she would remember not to store her password in the browser.<\/p>\n

This is just one example of how poor cybersecurity training for employees can leave your company seriously exposed to cyberattacks<\/strong>.<\/p>\n

\"Cybersecurity<\/p>\n

How to engage learners during cybersecurity training<\/h2>\n

Now that you know how important it is to keep employees engaged, here\u2019s what you can do to ensure the cybersecurity training you offer actually sticks:<\/p>\n

Create (or buy) engaging courses<\/h3>\n

First and foremost: your cybersecurity courses should be engaging, not boring. If you\u2019re unsure where to start, why not explore the ready-made courses in TalentLibrary™<\/strong>?<\/p>\n

The Cybersecurity Essentials collection<\/strong><\/a> covers everything from the importance of passwords and how to store them properly, to viruses, ransomware, phishing, and identity theft. More importantly, all the lessons are short, simple, and feature fun, animated characters.<\/p>\n

\n

Meet TalentLibrary™
\n<\/b>A growing collection of ready-made courses that cover the soft skills
\n<\/span>your teams need for success at work
\n<\/span>\"\"<\/a><\/p>\n

\"\"<\/p>\n

\n

Use more real-life examples<\/h3>\n

That scenario about Joan from accounting we used earlier? That\u2019s a good example of how to present complex subject matters, like password safety, in a way that makes sense and feels relevant to your employees\u2019 daily lives.<\/p>\n

Avoid technical, confusing language<\/h3>\n

Even when your training covers emerging technologies such as Cloud-Native Application Protection Platforms (CNAPP<\/a>), or complex issues like the GDPR regulations, you can still make sure you\u2019re using a language that would be easily understandable by a 15-year old. That way, employees won\u2019t feel alienated by the jargon.<\/p>\n

For example, take a look at the trailer for TalentLibrary\u2019s GDPR course:<\/p>\n