Security Awareness E-Learning

About This Project

Annual Security Training is a requirement for all Shaw employees to ensure the company is proactively educating its people to serve as front-line defense against the increasing risk of cyberthreats. This e-learning transformed traditional Security Awareness training into an engaging video game learning experience. With neon colours, retro music, classic graphics, punchy effects, and compelling industry stats, the training showcases a diverse cast of virtual characters in each of its levels. Using sophisticated logic based on the individual employee, there are 12 customized branches tailoring the content to maximize relevancy based on work environment (office, retail, field, etc) and the type of corporate equipment they use (laptops, payment terminals, vehicles etc). Using Shaw’s real incidents as learning opportunities, the training covers essential topics, and new and emerging security threats through interactive activities.

My Responsibilities

Project Management
Stakeholder Management
Instructional Design
Graphic Design
Development
Quality Assurance
LMS Management
User Support

Tools Used

Articulate Storyline 360
Vyond
Adobe Illustrator

Course Length

20 - 45 mins depending on branch

Project Goals

Course completion rate across the organization of 95% or more.
Learner understanding of Shaw's security policies and standards, and competently execute security reporting procedures.
Ensure relevant content to all roles across the organization. Previous Security course content was directed towards corporate employees and there was a significant gap in relevant information for non-office workers (60% of the workforce) such as technicians and retail staff.
Reduction in phishing link clicks on mobile devices. Security testing observed that the majority of employee clicks on phishing tests occurred on mobile devices.

Challenges & Solutions

Lack of team resources:

A 30-minute course was typically resourced to a team of four to cover project management, design, and development.
I created a six-phase workflow process to ensure the completion of tasks from intake to deployment, and utilized tools such as Vyond and Adobe Stock supporting efficient development.

User adoption:

This course was part of a larger Essentials Learning Program and would be the last of 8 mandatory courses.
Collaborating with the Enterprise Comms team, we created a central promotion theme from communications to certification to drive interest and adoption.
We also launched the course early with a targeted group of learners to create a word-of-mouth campaign, as well as used gamified language in our communications strategy to gain audience attention.

Outcomes

Course completion rate of 22% across the organization within the first 5 days of launch.
Course completion rate of 98% at deadline (3 months), as compared to 76% the previous year.
Phish testing analysis showed a 72% reduction in the number of clicks from a mobile device.

In an optional survey that accompanied the training which reached 46% participation (input from over 4,000 employees):

93% indicated they are leaving the course with increased confidence in their understanding of security in the workplace.
96% stated they know how to access Shaw’s security policies and standards.

Learner Feedback

"I felt like in Disneyland or Universal Studios, in one of those rides, but here I felt safe that we are all together in protecting our company’s assets against the cyber villains!”

“This was a nice change from the regular e-learnings we have been tasked to complete in the past. We hope future courses are as fun and informative as this one!”

“Fantastic interactive Essential Learning. Best one yet.”