Security Awareness Annual Plan PDF

Boost your employee's learning journey in 2024 with our latest annual security awareness plan that easily maps out your year. Get a simple masterplan for a comprehensive package to encompass all the fundamental security awareness principles with a touch of something extra.

In true Wizer style, we throw out the fluff and keep things simple. 

At A Glance:

Annual Security Awareness Plan

 

The 2024 Plan includes a primary annual training session at the start of the year and a mid-year refresher course. Following each training session, we will run the phishing game to test users' ability to detect ten different types of phishing attacks and how they respond to them.

Additionally, every month, we will release a new 1.5-minute video for all users, keeping them updated on the latest security threats. To assess preparedness, we’ll run a phishing simulation every other month. These simulations are a great way to see how well people can identify real-life phishing attacks.

Plus, they’ll show whether people actually report them or just ignore them and carry on with their day.

Our goal is to develop a security culture and to show everyone that being aware of security is a BENEFIT and not a chore.

To achieve our goal we will launch the “Defender Program” which will cover everyone's optional activities throughout the year. For instance, we’ll have two webinars each year centered on personal and family safety. Alongside these, we will set up a Slack channel. This will be a space for everyone to ask about personal safety issues and share their experiences.

 

Security Awareness Annual Plan: Month 1

SAAP 01

Annual Security Awareness Training

This is where we cover the basics - Passwords, Social Engineering, MFA ect. All in all it’s about 20 min including the quizzes. The team should finish this within 30 days.

Monthly Video

A new 1.5-minute video for all users will be sent once a month, keeping them updated on the latest security threats and awareness top of mind.

 

Security Awareness Annual Plan: Month 2

SAAP 03

Phishing Game

Now that everyone has completed the annual training, we should run the phishing game. This is a fun game that checks if people can recognize phishing emails and what action to take. For example, should you call and verify, report it, or check the social app. We can use the overall score as a baseline and check a few times a year if people are getting better at spotting
phishing

Phishing Simulation

This is a great way to see how well people can identify real-life phishing attacks. Plus, determine whether they report them or ignore them and carry on with their day.

Monthly Video

We'll keep pluggin' away with a fresh 1.5-minute video for all users, keeping them updated and on the lookout for the latest security threats.

 

Security Awareness Annual Plan: Month 3

SAAP 03-1

Add-on Training - AI

This brief training course serves as an add-on to the main annual training. It’s around 6 minutes long and focuses on Artificial Intelligence and how criminals use it against us. We’ll cover topics such as Deepfake, Voice Cloning, and ChatGPT.

Monthly Video

You guessed it - another new 1.5-minute video for all users, keeping them updated on the latest
security threats.

 

Security Awareness Annual Plan: Month 4

SAAP 04

Webinar For The Family

We should use this as an opportunity to position security awareness as a benefit and not a chore. For our Wizer Managed customers we run family-focused webinars to invite the entire team to an interactive session where we teach them how to keep their loved ones safe online. We encourage people to also bring family members. Contact us to learn more!

Monthly Video

Consistency is key! Keep the 1.5-minute monthly video rolling keeping your employees on top of current scams and trending threats.

 

Security Awareness Annual Plan: Month 5

SAAP 05

Family Safety Tips And Tricks (Newsletter)

Another aspect of our managed services for security awareness features a newsletter packed with excellent tips for family online safety at home. Inside we include a handy cheat sheet for enabling Multi-Factor Authentication (MFA) on popular apps, a family safety agreement tailored for kids, and guidance on securing social media accounts and mobile devices. All the advice is practical and ready to be put into action right away.

Monthly Video

Keeping up our monthly cadence our Wizer Boost continues to provide a new 1.5-minute video for all users, keeping them on their cyber toes.

 

Security Awareness Annual Plan: Month 6

SAAP 06

Focused Training - Advanced Phishing

This brief training course serves as an add-on to the main annual training. It’s around 6 minutes long and focuses soley on Advanced Phishing. We’ll delve into topics like Targeted Phishing attacks through LinkedIn and other social media platforms, Callback phishing attacks, and more.

Phishing Simulation

Time for another simulation of real-life phishing attacks to see how well learners are taking the trainings to heart - our goal for you would be to see an increase in reporting indicating a change in behavior.

Monthly Video

Build those scam-spotting muscles with continued monthly 1.5-minute video. 

 

Security Awareness Annual Plan: Month 7

SAAP 07

Refresher Training

This is an opportunity to dive a little deeper and target things that we will encounter during the first half of the year. The overall training will be no more than 15 minutes in total.

Monthly Video

Compliment your Refresher Training with the latest 1.5-minute video featuring relevant to the latest threats.

 

Security Awareness Annual Plan: Month 8

SAAP 08

Phishing Game

Now that everyone has finished the refresher training, it’s time to play the phishing game once more. This will allow us to evaluate how eective our training has been in the first half of the year and determine if people have improved at identifying phishing scams compared to when they played the game at the start of the program.

Phishing Simulation

Following the Phishing Game, we give your team a little extra hands-on practice with another round of simulated phishing emails. 

Monthly Video

A new 1.5-minute video for all users, keeping them updated on the latest security threats.

 

Security Awareness Annual Plan: Month 9

SAAP 09

Back To School Newsletter

This newsletter is targeted for employees with students returning to school. The start of the school year often brings various scams targeting both parents and kids. These include things like fake emails from school and fraudulent websites selling school supplies. Plus, we’re including some helpful advice on identifying if your kids are experiencing online bullying and
the best steps to take in response.

Want this benefit for your team? Get more information on our Wizer Managed services here.

Monthly Video

Time for a new 1.5-minute video on a trending scam or threat to keep your team alert.

 

Security Awareness Annual Plan: Month 10

SAAP 10

Webinar For The Family

It’s cybersecurity awareness month and we’re excited to share with you a simple and ready-to-use kit. The Wizer Security Awareness Month Kit contains email and social templates to coincide with 4 weekly themes with a cadence of 3x a week, Monday - Wednesday - Friday. Each text comes with visual resources to reinforce the focus of the day. Resources include videos,
PDF guides, images and interactive quizzes. And for our Managed security awareness customers we include a custom Webinar.

Phishing Simulation

Another round of phishing simulated emails are sent out. As it's cybersecurity awareness month, it's a good time to consider gamifying this batch and drumming up a little friendly competition to compliment all the awareness-raising.

Monthly Video

Top off the month with our latest 1.5-minute monthly video to round out your team's awareness.

 

Security Awareness Annual Plan: Month 11

SAAP 11

Phishing Game

Before the year ends, let’s check again how effective our training has been throughout the year. This will help us determine if your team has improved in identifying phishing scams compared to the beginning of the year.

Monthly Video

The year may be slowing down for the holidays but scammers are ramping up so keep employees vigilant with the monthly 1.5 minute video. 

 

Security Awareness Annual Plan: Month 12

SAAP 12

Beware of Holiday and Shopping Scams Newsletter

It’s the holiday season and everyone is out shopping, and we're here to help people avoid getting scammed. This year-end newsletter provides numerous tips on identifying fake online stores, deceptive ads, counterfeit gift cards, and more.

Phishing Simulation

Close out the year with one final simulation and see how your team is improving in not only identifying but reporting those phishy emails. 

Monthly Video

The final 1.5-minute monthly video of the year to keep learning light as the year winds down. 

 


Want to get all the training mentioned in this post for free?

Sign up and try Wizer Boost to get full access FREE with a 14-day trial. 

Or request a demo


Measuring The Effectiveness Of Your Awareness Program

Phishing Report Rate

Image 1
  • Simulated + Real Incidents: We’re tracking
    how many people report both simulated and
    real phishing attempts 
  • Unreported Simulated Clicks: Our goal is
    to reduce the number of people who click on
    simulated phishing emails but don’t report
    them.
  • Real Phishing Reports: We’re monitoring
    the frequency of real phishing email reports

 

 

Phishing Simulation Click RatesImage 2

Overall Reduction Desired: We aim to lower
this rate, as a lower click rate indicates better
recognition of phishing emails.

 

 

Click Rates Among
Sensitive Access UsersImage 3

Special Focus: We’re paying close attention to
the click rates of users with access to
sensitive information, with a goal to see this
number decrease.

 

 

 

Training Completion Image 4

Timely Completion: Our objective is for
participants to complete their training
promptly

 

 

 

Growth In DefendersImage 5

Increasing Participation: We’re looking to
boost the number of participants in the
defender program and those engaging with
optional content like webinars and Slack
discussions.

 

 

Employee Rating Image 6

Security awareness is all about two-way
communication, so hearing back from
employees is key. By keeping an eye on their
reviews and the overall score they give the
program, we can get a pretty good sense of
how engaged they are with it and how to
improve.