Moving from employee compliance to employee success in the cyber security domain

Organisations frequently use fear as a tool to bring employees in line with cyber security policies, assuming that it’s an effective way to assure compliance. But many people respond negatively and this approach can have the opposite effect to the one intended. Karen Renaud, Stephen Flowerday and Marc Dupuis look at how turning cyber security education into a game makes it more readily embraced by staff and can have deeper, longerlasting results.