SOMETHING PHISHY IS GOING ON!

Transcription

1 SOMETHING PHISHY IS GOING ON! Engaging, easy to understand, memorable training.

2 WHAT WE DO We have created a series of training episodes that are highly engaging, easy to understand and memorable. They cover security best practices and elements recommended by security frameworks and standards such as the ISO and PCI DSS (Payment Card Industry Data Security Standard). Awareness video content Marketing materials security awareness Getting the content to the user Client LMS Via SCORM 1.2 or rd Edition exports compliance Cloud or or Mini LMS Via Popcorn Training s Cloud LMS secure coding installed onsite Plus SecureToon desktop Mailers Posters Screensavers Articles Comic strips Presentations Key messages are provided through the video content and reinforced by quiz questions and accompanying material such as comic strips and articles. User s understanding of the most important points is measured through a short quiz summary at the end of each module. STORY BASED TRAINING A picture is worth a thousand words, and we believe that a good story is worth a thousand training sessions. When listening to a story Biochemical changes take place in the brain Decrease levels of cortisol (the stress hormone) Promotes relaxation. By-pass critcial, analytical functions. Optimal mental state for accepting and retaining information. Listeners more receptive to change and new ideas

3 PRODUCTS INFORMATION SECURITY AWARENESS MODULES Currently available modules covering different aspects of information security: SOMETHING PHISHY! Something Phishy Intro: Phishing, Spear Phishing Dicey Devicey BYOD Security, awareness of info, PIN policy, remote wipe Mobile Mayhem Mobile threats, USB sticks, phones, laptops Freaky Leaky Data leakage threats, use of confidential information Pass the Password Social engineering, Password policy Cloud Security Threats, risks, safe use of cloud applications Breaking the Barrier Physical security, clean desk Social Media Value of data: threats Policy principles: Appropriate content, corporate values, 3rd party comments Phishious Malicious Internet usage, threats, drive by downloads Cybercons Setting up money mules/ bank account, online scams, social engineering

4 COMPLIANCE TRAINING MODULES Protection of Personal Information - Definition of personal information - Threats (identity theft) - Principles of POPI Act in relevance to end users Intro to Consumer Protection Act (CPA) - 9 principles of CPA explained - Applicability in retail environment The National Credit Act (NCA) - Overview of the National Credit Act - How to deal with consumers when discussing credit Treating Customers Fairly (TCF) - Introduction to Treating Customer Fairly (TCF) approach - Relevance of TCA in general product life cycle - 6 outcomes of TCA SECURE CODING TRAINING MODULES Web Application Security Intro Main threats to web applications - security principles Authentication & Authorisation Authentication, password controls, authorisation Avoiding Injection Attacks Preventing injection attacks Avoiding CSRF Attacks Secure transactions, secure deployment Secure Session Management Preventing session hijacking attacks Data security Cryptographic methods

5 SAFE ONLINE SITE and mobile app Company branded, practical Intranet site and/or mobile app (mobi) for staff on how to keep their families safe online. GETTING THE COURSES TO THE USER We can provide all our content in various formats to suit your needs: CLIENT LMS SCORM V.1.2 or 2004 compliant packages If you have an existing Learning Management System (LMS) onsite, we can provide courses in SCORM compliant packages for your integration. Packages include the videos as well as quiz questions. CLOUD The Popcorn Cloud Our training cloud solution allows for very easy access to course material from anywhere at any time. SECURETOON REQUIREMENTS: Windows server (can be virtual), Internet Information Services (IIS).Net framework 4, SQL or SQL Express Onsite Mini LMS We can provide our videos in a fun mini quiz application called SecureToon that can be installed on your network. SecureToon Desktop For users in remote or distributed offices, we can provide a simple windows application that can be distributed onto user s desktops. The application includes relevant video files, removing the need of streaming video content over the WAN.

6 MARKETING MATERIAL We offer a comprehensive kit of marketing materials to reinforce your campaign, and there s the option to customise material to suit your organisation s needs. Never share your login details with ANYONE (work or bank details) YOU ARE THE PHISH! Cyber-criminals want you to take the bait so they can steal your identity and your money. Posters Communicate key learning through comical posters Widespread awareness Repetition of key learning messages Full cast of memorable security awareness characters Don t click on suspicious links in s you may download programs that steal your data! These phishies know how to avoid a phishing attack from Cybercriminals. Do you? To find out more, watch our cartoon Something Phishy and stand a chance to WIN an ipad mini. Go to [Intranet path] Articles/Newsletters Light-hearted & informative to ensure reader engagement Repetition of key learning messages Available for print or web media Monthly subscriptions available Comic strips Who doesn t love a comic? Grab a cup of coffee and giggle over the monthly security comic strip. Cartoon story based, humorous Available for print and web media Repetition of key learning messages Security made fun campaign teasers Cartoon story based Piques user curiosity Marketing tool to ensure interest and user participation in campaign Intranet banners, desktop-pop up messages or screensavers Launch day events Popcorn movie screening day Presentation material Character masks for industrial theater Marketing and event planning assistance - hiring of popcorn machine, red carpet, hand-outs

7 CONTACT US Telephone Visit us on facebook: Popcorn Training Fraudy Skimbag Robbin Yodata Find us on LinkedIn: Anna Collard Claire Stewart Sacha O Reilly