Forum Discussion
Interactive phishing awareness activities
I recently prepared a cybersecurity awareness session for a small organization and used realistic examples of phishing emails, scam text messages, and fraudulent phone calls. I found that working with concrete examples was much more effective than simply explaining a list of warning signs.
For future training, I would like to make this part more interactive. Do you know any tools, activities, or freely available resources that allow learners to safely practice recognizing and responding to phishing attempts?
Ideally, I am looking for something suitable for non-technical learners and a bit more interactive than a standard multiple-choice quiz. I would be interested to hear what has worked well in your training or e-learning projects.
4 Replies
Ideally the course will challenge them in the same ways they'll be challenged out in production. If the greatest vector of attack is emails, you can put up a screenshot of a fraudulent email, and then have the learners click (invisible) buttons to identify the give-aways.
Identifying phone calls can be taught a variety of ways. A simple challenge might involve someone listening to two audio clips, one right and one wrong, and trying to figure out which is which. A more complex implementation could chain a few branching-buttoned slides together to have learners choose responses to a hypothetical scenario.
What does success truly look like?
Hi Silvia_Chroma,
PhilMayor shared a really cool example where the learner builds a phishing email to understand what to watch out for. He also talks more about how he built it in this webinar. I hope this provides some inspiration!
Very enjoyable!
