Feeling overwhelmed with all the different activities that are necessary to set up your cyber awareness program? Don’t worry, our KPMG teams can support you throughout your entire awareness program!
We interviewed one of our leading awareness specialists, Freya Covens, to give you some insights into the services we can provide regarding your cyber awareness campaign.
Freya, could you briefly explain what a typical awareness project entails?
Sure! Our standard approach starts with an introduction meeting to discuss the scope of the awareness project. In this meeting, we gather together all relevant stakeholders to listen to their ideas and which activities they would like us to cover. For example, newsletters, a security mascot, e-learning sessions, phishing campaigns, awareness sessions, and so on. Based on this meeting, we prepare an awareness calendar to determine the different activities and topics that need to be covered throughout the year. All of this is done in close collaboration with the client.
Freya Covens, Advisor, Enterprise Risk Services
So, once the awareness calendar is created, what's the next step in the process?
Following the creation of the awareness calendar, we offer ongoing support for the activities outlined in the calendar. For instance, in the creation of newsletters. If phishing exercises need to be performed, we'll coordinate and plan the phishing campaigns. All in close collaboration with the client. Additionally, we will provide KPIs for monitoring the effectiveness of the entire awareness program. Based on these insights we can adjust the awareness campaign as needed. In summary, the initial stage involves creating the awareness calendar, followed by providing support to implement it within the organization.
So, if I understand it correctly, some input from the client is required?
Yes, the client's input is crucial in understanding their specific needs and aligning the activities with their goals and objectives. This ensures that the awareness program is tailored to their requirements and effectively addresses their concerns.
How did you end up in cyber awareness at KPMG?
I normally work on IT audit and attestation projects. Nevertheless, my creative inclinations and interest in security and privacy eventually led me to be involved in cyber awareness projects. As I developed more expertise in these projects, I discovered that they align perfectly with my interests. I particularly enjoy the creative aspects, such as crafting phishing emails, designing security mascots, writing newsletters, and more. The continuous nature of these projects also allows me to observe the results of our campaigns over time, which I find highly rewarding.
What has been your most memorable awareness project so far?
I had a great time with a project for a client in the public sector. We had a very personal connection with the client's team, which created a good working atmosphere and meant we were all on the same wavelength right from the start. They also gave me a lot of creative freedom, which I really appreciated.
Are there some other projects that you currently are working on relating to cyber awareness?
We also have an initiative at KPMG where we give security awareness sessions during the month of October to students aged 7 to 16 years. Through these sessions, we aim to empower them with the knowledge and tools they need to navigate the digital world safely, make informed decisions online, and protect themselves from potential threats.
Do you have questions related to cyber awareness?
For guidance or further information on cybersecurity-related topics, feel free to reach out to Benny Bogaerts.
