CASE STUDY
Cyber Savvy Success at Endeavour Energy
Background: In 2016 staff clicking on phishing emails was an issue at Endeavour Energy. An external provider was brought in and through a 60 minute off-the-shelf eLearning the click rate was reduced by 5.6%. However, by 2018 the rate was higher than before.
The Challenge:
Inspire Behavioural Change
Inspire safe cyber behaviour in field staff who were being encouraged to use technology for the first time at work (for work force automation and asset management).
Meet Compliance Requirements
Comply with critical infrastructure licence requirements to protect data.
Cater to Diverse Audience
Inspire behavioural change for both office and field based staff using a range of electronic devices.
Cater to Change in Technology Use
Protect valuable information across the business as more staff increased their use of technology.
The Crafted Learning Solution
An annual contextualised eLearning and communications campaign with real, relevant and engaging content, aimed at building awareness in emerging cyber security attacks and educating staff on how to be cyber savvy.
Concise, responsive content with both PC and iPad examples.
Results
• Reduction of click through rates in 2018 by 11.2% and further reductions in subsequent years.
• Real behavioural change with rebound rates lower than previous baselines.
• Reduction of duration of eLearning with increasing effectiveness, minimising time off tools.
• Embedded behavioural change: sustained safe behaviours over 3 years.
1. An external provider was brought in and through a 60 minute off-the-shelf eLearning the click rate was reduced by 5.6%. However, by 2018 the rate was higher than before.
2. In 2018 Cyber Savvy a 30 minute contextualised eLearning and communications campaign was launched, and the click rate was reduced by 11.2% to be at its lowest rate ever. Less time off tools and twice as effective as in 2016.
3. In 2019 the click rate had rebounded a little but was still lower than previous years which showed real behavioural change. A 20 minute Cyber Savvy Refresher eLearning resulted in a further reduction. This was despite more sophisticated phishing emails being sent as a test. Communication campaign continued.
4. In early 2020, with people working from home, the rate continued to fall to record lows. With increasing attacks on businesses and government Cyber Savvy 2.0 was released, reinforcing previous concepts and included a Human Firewall video of people across the business.