Training is the centrepiece of any strategy devised to mitigate cyber threats posed by human errors. It has generally been well established in several research projects (including this one) that, when it comes to cybersecurity, training programs have low retention rates and, in general, an unpredictable impact on the actual reduction of cyber risk posed by individuals. 

The reported reasons why training only sometimes works often include the inability to engage workers, poor content quality, inappropriate language for the audience, and conflicts with work demands.

Solution 0427, a powerful tool designed to optimise the development of people's skills and awareness programs, promises to significantly enhance cyber awareness. It calculates the impact of training investments and can be used to enhance the impact of cyber awareness activities in specific HR clusters, offering a beacon of hope in our quest to minimise human risk factors. To this aim, Solution 0427 is training paradigm agnostic. 

The solution harnesses the precision of machine learning algorithms, in tandem with dedicated decision‐support dashboards, to pinpoint cyber awareness weaknesses among employees and identify training and competency needs, with cyber risk as a key criterion. This information equips us to target awareness campaigns strategically and training for the most vulnerable clusters, empowering organisations to fortify their resilience by proactively addressing cyber risks through enhanced awareness and training.

No regulatory changes are foreseen to be required, but the solution aligns with the well-regarded recommendations of NIST SP 800-50r1, "Building a Cybersecurity and Privacy Learning Program", released in September 2024.

BENEFITS

• Increased and continuously updated cyber risk awareness and maturity among ATM stakeholders in an everchanging threat environment.