Cybersecurity has become a hot topic for businesses and their managers in recent years. Faced with the scale, recurrence and diversity of cyber attacks, companies need to beef up their cyber strategy. Raising employee awareness of cyber issues is an interesting avenue to explore. Why not consider a serious game?
A serious game is literally a serious game, developed with the aim of tackling so-called serious learning or information content using an entertaining approach. Studies have shown that new technologies used in training can have a beneficial effect on learning. What are the advantages of a serious game applied to cyber security?
Why consider a cyber game for your cyber training?
1. Put yourself in a situation to get a better grasp of the subject
Cybersecurity is a complex, fast-moving subject that requires awareness-raising at all levels of the company, as there are many ways for attackers to get in. From president scams to increasingly sophisticated ransomware, it is essential to make everyone in the company aware of cyber risks. To do this, role-playing is ideal, as it helps to get the message across and gives concrete form to a subject that may still seem abstract to some. Where cybersecurity may seem technical, abstract and complex, serious games make it concrete, fun and engaging.
2. Stimulating team spirit
Cybersecurity is an issue that is mobilising a growing number of stakeholders in the company. The case of a cyber crisis speaks for itself. At the heart of the action are the cybersecurity teams, of course, but also general management and the information systems department in the broadest sense, the communications department for the impact on reputation and image, the finance department for the financial impact, the legal department for the legal implications, etc. It is therefore essential to know how to work together, both on a day-to-day basis and when exceptional situations arise. And there's nothing better than a team serious game to stimulate this cohesion, encourage communication and help people make informed decisions that are debated and understood by all.
3. Developing the right reflexes
By practising in real-life conditions, employees can see the impact of their decisions on the course of the game. This makes it quicker and easier for them to assimilate the reflexes and jargon specific to cybersecurity. At stake is the speed with which teams can identify the occurrence of an attack and implement remedial action, which is essential from a cyber resilience perspective.
4. Progress while having fun
It is in the levers specific to games that serious games find their strength. Gamification enables faster and deeper learning, accelerated by practical application. Because the underlying subject is presented in a fun way, learners are put in a situation where they can play along: their commitment is stimulated by putting the game into action. They progress and learn without realising it.
5. Memorise more effectively
A PwC study showed that training courses using new technologies, such as virtual reality, accelerated learning by a factor of 4, increased learners' confidence in putting what they had learned into practice by 275% and increased their concentration by a factor of 4. On a complex subject such as cybersecurity, serious games can also be used to memorise concepts more effectively, to help build team cohesion and to understand what is involved in a cyber attack.
6. Practice makes perfect
In a game situation, participants are less afraid of making mistakes and taking the wrong decisions. Better still, by observing the impact of decisions taken collectively, they assimilate good practice and develop their reflexes. By practising, they progress and sharpen their ability to protect the company's critical assets and sensitive data against compromise.
7. Exchange and debrief
The serious game puts the learners in a real-life situation, in a fun and engaging context. But even more importantly, it is essential that the game allows time for discussion between participants and the trainer. The trainer will be able to go back over the course of the game, highlight the decisions made by the participants and explain the impact of these decisions. In doing so, the trainer will detail the mistakes made, highlight the areas for improvement to be worked on as a team and the strengths to be built on.