IT-Security Awareness Training for International Company Locations

An internationally operating company with multiple locations wanted to sustainably improve the security awareness of its employees in the area of IT security and cyber security. Cyberattacks represent one of the greatest risks for companies today. At the same time, more and more cyber security insurances require employees to be regularly trained in IT security. Additionally, there are requirements from various compliance guidelines, internal security regulations, and IT standards.

The company therefore sought a solution to:

• Regularly train all employees in IT security
• Uniformly cover international locations
• Provide training in multiple languages
• Centrally document the training status
• Create evidence for audits and insurance

With multiple international locations, it was organizationally difficult to consistently implement awareness training. At the same time, it should be ensured that:

• New employees are automatically trained
• Training is repeated regularly
• Managers always have an overview of their teams' training status
• Training is documented in an auditable manner

In addition, the solution should be integrated as seamlessly as possible into the existing IT infrastructure.

For efficient user management, the system was connected to the company's existing Microsoft environment via an Active Directory Connector. This enabled several processes to be automated:

• Employees can log in with their Microsoft login (Single Sign-On)
• Users are automatically imported from Active Directory
• Teams and organizational structures are automatically adopted
• Changes in Active Directory are automatically synchronized

The awareness program was structured as a multi-year training cycle.

The awareness training was introduced for multiple international locations. The trainings are available in multiple language variants, ensuring a uniform awareness standard for all employees worldwide.

Through the instruction system, managers always have an overview of their teams' training status. The system offers various functions for this:

• Statistical evaluations of training progress
• Automatic notifications for outstanding training
• Reminders for employees
• Overviews for team leaders

This allows those responsible to track at any time whether their teams have completed the required training.

The system automatically creates evaluations of the training status. These reports can be used for example for:

• Internal compliance controls
• IT security audits
• Evidence for cyber security insurance
• Management reports

At the end of a training cycle, an audit or final report can be created that documents the training status of the entire company.

By introducing the awareness program, the company was able to achieve several goals:

• Uniform IT security awareness among all employees
• Regular awareness training for international locations
• Automated user management via Active Directory
• Clear overview of training status
• Complete documentation for audits and insurance