Tailoring cyber security training based on an individual’s current cyber security knowledge and the job role. Title so far – ‘Keep you and your company safe – Effective cyber security training’

Cyber security training is one aspect of an organisation’s overall cyber security package. However, these are usually one-size-fits-all packages. As the UK government aims to be one of the safest nations when it comes to cyber security, the Cyber Security Body of Knowledge (CyBOK) was created. This research uses this knowledge as a basis to assess what an individual will need to know in certain non-technical job roles.

The assessment platform, Cyber Awareness (Assessment) Platform (CAP) will assess and recommend tailored cyber security training or recommend the Knowledge Areas (KA) from CyBOK that an individual may need more training in, in order to maximise their own cyber security knowledge and awareness. CAP is a proof of concept with user testing to take place in late 2023, however, findings from a survey conducted in early 2023 found that there is a distinct lack of tailored cyber security training across all industries (8.1%) and participants in industries that are non-technical in nature had no cyber security training at all (Creative and Hospitality).

Cyber security training needs to be tailored to the individual, based on their current level of knowledge and the level of knowledge expected for the job role. This should lead to fewer successful breaches and therefore the negative impacts an organisation suffers once there has been a successful breach and this will also help individuals protect themselves outside of their organisation.