Security Awareness and Training

What EY can do for you

At EY we believe successful awareness programmes motivate and engage people in an ongoing manner.

The three pillars to a successful cyber awareness programme are:

• Awareness is a continuous effort – A “one-time” awareness exercise is unlikely to embed secure behaviours in people’s day-to-day routine. In order to be successful, an awareness programme needs to actively work on the behavioural change. The recurrence of the awareness efforts, intertwined with learning by repetition and group success, increases the chance of that change.
• Learning does not need to be passive - Instead of a “scholar” approach, new methods of training and learning actively engage and motivate people, following gamification methods (the application of game principles to business problems). This increases engagement, helps to incentivize learners to actively participate and generates fruitful discussions about cyber security.
  
• Each awareness programme is unique - Cyber awareness programmes need to be driven by the actual business risk to align with the organization’s needs and provide the best tailored solution.

Our approach aims for long-term behavioural change by building a security-oriented organizational culture, encouraging the right mindset and involving the entire organization in the cyber awareness process.