Intelligent CISO Issue 29 | Page 53

COVER STORY The support from Knowbe4 is amazing and the relationship we have operates more like a partnership, which is what I would love to see with all of my other cybersecurity suppliers. videos intermittently – a format that has really worked for us. What are some of the cybersecurity challenges facing the industry and how are these being combatted? As an industry, we are not used to this kind of remote working at such a large scale, so that was the biggest challenge. In fact, as far as Business Continuity plans go, this wasn’t even part of the equation, as it wasn’t for many companies. We needed to quickly ramp up equipment and make sure that any working employee had access to a company device; and where they wanted to access information on a personal device, we quickly deployed MFA to allow for this. Another way we could make sure everyone felt connected and supported was through the use of Microsoft Teams – not only from a security awareness perspective, but also from a personal one. It helped us communicate to employees how to work remotely and created a sense of togetherness. How has KnowBe4’s tailored solution helped SIG to achieve great results? We’ve used the feedback capability through the KnowBe4 platform to gauge how well it has been working and the response has been positive. We made the decision to release episodes of the Inside Man every two weeks, but employees have requested them sooner – it has really improved security awareness culture and the perception of security training in our business. In fact, our learning and development team can see the benefit of this kind of training and is in talks with Twist & Shout (a KnowBe4 company) to enhance their own initiatives. So, it has been a catalyst in other areas of our business outside of IT and cyber. What long-term benefits do you predict for the future as a result of the implementation? The pandemic has brought on the need for remote working at scale and with it, the need for security awareness increases. We’ve recently also purchased the PhishER and PhishRIP services from KnowBe4 that empower people to help themselves and report phishing emails easier. But not only is it easier from a reporting perspective, there are also communications back to the employee that thank them for recognising suspicious messages. It’s about positive reinforcement. With the breadth and choice of different training materials, we’ve completely changed our awareness programme and it means we can train people more regularly (rather than annually or boring tick box exercises). This constant reinforcement is really powerful. How would you summarise the overall experience with KnowBe4? I am a huge fan. The platform continuously evolves and the content is amazing. Even issues I may have had with it in the past have now been addressed in development or are being addressed. The support from Knowbe4 is amazing and the relationship we have operates more like a partnership, which is what I would love to see with all of my other cybersecurity suppliers. After all, we’re all working towards the same goal. u www.intelligentciso.com | Issue 29 53