Phishing != Security Awareness

Hi Nermin!

I wanted to share an experience that I recently had in my master's degree program, our group was paired with a non-profit organization and advised to give consulting on how to improve their cybersecurity practices. We quickly realized that the employees and the leadership at this organization didn't not care about the best cyber practices, it's that they weren't aware of what the possibilities of 'bad actors' were.

We ended up doing an exercise with the entire employee group to walk them through 'fictional scenarios', then had them think through what could happen and last, ended with showing them an example of this being exploited in real life. 

This helped them grasp how tangible these attacks were to them and their organization. Happy to chat more about this if you would like! Apologies on letting this go unanswered for a while! :)