Personalized support
At Conscio Technologies, we support you from the very first contact. Drawing on 15 years’ experience, we offer you this support based on the OKISPRI method.
Definition of objectives and KPI's
O for OBJECTIVES:
In our 15 years of experience, we have been able to identify the main objectives pursued by awareness-raising operations. Here, you need to identify which objectives are your priorities.
K for KPI’s :
What can’t be measured tends not to exist. Here, we work with you to identify the indicators that will enable you to determine whether or not your operations are achieving satisfactory results. We can also identify target values for these indicators.
Strategy development and pilot definition
I for INVOLVING :
In conjunction with the psychology laboratory at the University of Aix-Marseille, Conscio Technologies has developed an approach known as implicative awareness-raising. This involves using techniques from the psychology of persuasion and commitment to maximize the participation and effectiveness of awareness campaigns.
S as in STRATEGY:
Defining an awareness strategy helps to answer the following questions.
– Who (target/population): Identify the user groups to be targeted to maximize the impact of awareness campaigns.
– What (content): Determine the topics and types of content to be disseminated, based on the specific needs of each group.
– How (campaign implementation, etc.): Plan the implementation of campaigns, using the most appropriate channels and methods to achieve the set objectives.
– When: Choose the most appropriate times to launch initiatives, taking into account the company’s calendar and periods of risk.
P for PILOT:
The aim here is to validate the choices made above by launching a few targeted campaigns among a sample of the population.
Organization of the awareness program
R as in RUN :
The deployment phase (Run) consists of implementing the strategy throughout the organization. In the largest companies and administrations, sizing in terms of load-bearing capacity is essential. The specific features of the organization are also taken into account (breakdown by business line, subsidiary, branch, country, etc.).
In this phase, the various awareness campaigns and phishing tests are launched. Statistics are collected and reports sent out.
I for IMPACT :
Let’s not forget that the aim of all these operations is to have a real impact on employee commitment and behavior with regard to cybersecurity. Getting them to make the commitment that hacking will not pass through them.
Of course, this can’t be achieved overnight, and the effort needs to be sustained over several years.
To measure this impact, beyond observable indicators such as the results of phishing tests, there’s nothing like drawing information from the source, by surveying employees themselves.
So, at least once a year, it’s important to conduct an impact survey among learners.