Information Systems Security Training

How to raise awareness of cyber risks and train sensitive profiles to adapt better preventive behaviours ?

The context

With the entry into force in July 2017 of the Military Planning Law (LPM) and the European Directives (NIS) aiming to strengthen France and Europe’s means of protection in the cyber world, cybersecurity has become a priority for the OIVs (Operator of Vital Importance) who must meet these requirements.

There are many digital cybersecurity training courses on the market, but none of them covers the needs of more experienced profiles such as Administrators and Privileged Accounts, profiles with access to sensitive company data.

It is in this context that a group of companies (Air France, BPCE, Société Générale, Caisse d’Epargne and La Banque Postale) launched a call for tenders to meet the specific needs of these profiles in terms of developing their knowledge, reflexes and best practices.

The idea

Thanks to its experience in developing innovative and tailor-made digital training courses, SBT Human(s) Matter won the tender with an original and attractive digital proposal.

The subject is serious and complex. Our challenge was therefore to develop a product that “makes learners want” to tackle this ambitious training programme. To do this, SBT Human(s) Matter used motivational levers, by creating playful and scenaristic mechanics to capture attention and encourage the learner to go further to develop his knowledge (web-series, mini games, interactive contents…)

The course was co-constructed in 6 months, by pooling the business knowledge of the group’s CISO experts and those of agencies specialising in cybersecurity.

The solution

A complete digital trail of 12 episodes that gives the keys to understanding the issues, setting up the right conditions for maintaining security, detecting and managing risky situations and reacting in the event of a cyber-attack.

The 12 episodes, presented in the form of a web series, plunge the user into the world of cybersecurity. Playful and varied pedagogical activities develop the concepts initiated by the series (digital learning capsules, mini-games, quizzes to assess one’s progress, etc.). 

The course delivers a certificate recognised by several OIVs.

The course lasts between 6 and 8 hours depending on the participant’s pace. It is available in French and English.

Pleasant experience for such a dense and complex subject! Varied activities: animations, interactivity, web-series and quizzes… Bravo!”

CISO of a banking organization

“Beyond simple awareness, this program addresses aspects of network technology and network security that we don’t find in other training courses.”

NHS Provider

The training is currently being referenced in the France Competence catalogue and labelled on the ANSII (OIV control agency) reference system since it is the only digital training course at present that addresses profiles of privileged accounts and IS administrators. Over the last 2 years, more than a hundred companies have registered and more than 6,000 passes have been recorded.

For more information, please do not hesitate to contact:

Rodolphe OLLIVIER

Associate director, digital learning

Rodolphe Ollivier Equipe SBT Human(s) Matter - Formation SSI comportements cyber cyberchallenge