Abstract

In the contemporary digital landscape, small teams within enterprises are often targeted by cyber-criminals who seek to breach their security and access sensitive information. This article examines a range of strategies and resources to support cyber-security education and awareness programs that are tailored to the needs of small teams within enterprises. The aim is to empower individuals and teams to recognize and respond effectively to cyber-threats. After briefly explaining what cyber-security is and the type of threats a team may encounter, the article explores education strategies discussed in the current literature. The authors then present examples of resources they have identified or developed during this research. This includes an analysis of an ISO standard that presents an example risk-assessment plan as well as an interview sheet we developed for performing an initial assessment of a teams cyber-security awareness level. Strategies for educating teams about how to address typical cyber-security situations a team may encounter, such as email phishing scams, are then explored in the context of an example training plan that can be used to facilitate interactive and engaging learning. The article concludes that teams often face unique challenges, including limited resources, varying levels of technical expertise, and the ever-present risk of underestimating cyber-threats. Promoting a proactive cyber-security culture within a small team by using resources organised into an systematic program is a crucial step in building a resilient and security-aware workforce.

Keywords:
Cyber-Security Awareness, Education, Team Development, Resources, and Small-to-Medium Enterprises.

Download the article (pdf)