In a world where our phones and social media dominate our social lives, it may seem like we have a good grasp on technology. However, this familiarity can make us vulnerable to cyber criminals who are constantly finding new ways to access our personal and financial information.
Cybersecurity training is crucial in today’s era of evolving cyber threats. But traditional training methods often struggle to keep up with the dynamic nature of cyber crime, and many employees may not see themselves as a potential vulnerability to their company’s security.
Surprisingly, employees are actually one of the biggest threats to a company’s cybersecurity. In 2022, 39% of UK businesses experienced a cyber attack, costing each business an average of £4,200. Many of these attacks came through email cyber attacks, affecting 20% of workers. To protect against these threats, businesses need to prepare their workforce to be the “first line of defense” against cyber crime.
At imc, we understand the challenges faced by major corporations in 2023, particularly when it comes to raising awareness about cyber threats and implementing the right training. Our recent research revealed that 56% of managers don’t train their teams to meet mandatory requirements, and 48% of employees prioritize career advancement over cybersecurity training.
The biggest cyber security threats in 2024
In the coming year, businesses should be aware of some of the newest cyber threats:
- Deepfakes: Criminals are using AI-generated deepfake videos and audios to extort money or manipulate public opinion. Employees may unknowingly release sensitive data or transfer money under the guise of a voicemail from their boss.
- RaaS, or Ransomware-as-a-Service: This collaboration between ransomware criminals and affiliates is a lucrative business, with revenues reaching $20 billion in 2020. Criminals set up RaaS platforms that appear legitimate and trick users into sharing personal data, which is then held for ransom.
- Supply chain cyber attacks: The complexity and global nature of supply chains make them vulnerable to cyber attacks. Shockingly, only 7% of businesses review risks associated with their supply chain, leaving them unaware of potential threats.
So how can businesses effectively educate their employees about cyber security? The answer lies in gamification. By integrating game-like elements into training programs, businesses can increase engagement and encourage the desired behaviors. Research has shown that gamification can foster motivation, performance, and social connection among participants.
At imc, we have developed Cyber Crime Time, a playable adventure that provides employees with a basic understanding of cybercrime awareness and IT security breaches. By making cybersecurity training fun and engaging, businesses can empower their employees to become a stronger first line of defense against cyber threats.