need to train employees on cybersecurity, i don't know anything about this, how do i start

if you do training please keep it short... employees hate long meetings. edit: even one 30-min session a month is enough

sample training schedule: - Jan: Password security - Feb: Email scams - Mar: Physical security - Apr: Home wifi - May: Data storage - Jun: Reporting after an attack

do a survey before training — what do employees lack knowledge in? how much time will they dedicate? then customize the training.

use videos reading text is boring. there are security videos on youtube, you can use them ready-made

isn't employee participation hard? some act like security isn't their problem.

i think the atmosphere changes when you do training! employees feel responsible warn each other. it's great

my perspective changed after exepriencing that. if you get three different answers on a topic, the question was asked wrong.

the biggest time-waster for us was not knowing who had the final say but this is my opinion Im not claiming its absolute truth.

I went through the same thing.

Timely topic.

There's a common mistake people make when doing this. Hasty decisions become decisions you have to fix six months later.

When you try to change everything at once, nothing settles.

let me share my experience. like having backups accessible on the same newtork and with the same identity makes them part of the target.

this is my opinion I'm not claiming it's absolute truth.

it's rare to find an explanation this clear.. and don't rely on a single measure; go layer by layer.

forgotten test environments are more often the entry point than live systems.

The answer above hits the nail on the head. Forgotten test environments are more often the entry point than live systems.

To get into the details: Most incidents start with a leaked password, not a vulnerability.

Mistakes made on the employee awareness training side are usually reversible but expensive.

Let me summarize the topic, since several different answers were given. If you scold false alarms, nobody will report again.

Any unwritten clause becomes a point of disagreement later, as both sides remember it differently.

I think it's hard to be that definitive about employee awareness training. If you get three different answers on a topic, the question was asked wrong.

Don't rely on a single measure; go layer by layer. If I were you, I'd go this route.

i have no experience with employee awareness training, so I'm asking... like your time to detect an issue directly determines its cost.

everything goes well for the first three months; problems arise in the fourth. if you post the result here, it will help others too.