Employees represented one of the organisation's highest cyber risks due to phishing susceptibility and inconsistent security awareness across business units.
The organisation recognised the need to improve user behaviour, strengthen its cyber culture, and reduce the level of human-related risk across the enterprise.
The Challenge
In an increasingly complex threat landscape, employees remain a critical part of an organisation's cybersecurity defence. However, inconsistent security awareness and varying levels of cyber hygiene across business units created significant exposure to phishing and other human-targeted attacks.
The organisation needed a structured, measurable, and continuous approach to improving employee cyber awareness while embedding security into everyday behaviours and business culture.
The objective was to reduce phishing susceptibility, increase the reporting of suspicious activity, improve employee engagement with cybersecurity, and provide leadership with clear visibility into human-related cyber risk.
A strong cybersecurity culture begins with informed and engaged people. By combining awareness, behavioural insights, targeted training, and continuous engagement, organisations can turn employees from a significant cyber risk into an active layer of defence.
Our Approach
Abiryva consultants designed and implemented an enterprise-wide Security Awareness & Human Risk Management Programme.
The programme combined simulated attack scenarios, targeted awareness training, executive engagement, behavioural analytics, and continuous communication to create a measurable and sustainable improvement in the organisation's security culture.
The programme included:
- Simulated Phishing Campaigns
- Targeted Awareness Training
- Executive Engagement
- Departmental Risk Reporting
- Security Champion Initiative
- Behavioural Analytics
- Continuous Awareness Campaigns
Creating a Security-First Culture
The programme moved beyond traditional annual security awareness training by creating an ongoing approach to understanding and influencing employee behaviour.
Through regular phishing simulations, targeted learning interventions, departmental reporting, and continuous engagement, employees received relevant and timely guidance based on real-world behaviours and emerging risks.
The introduction of a Security Champion Initiative also helped extend cybersecurity awareness across business units by empowering individuals to promote secure behaviours within their teams.
Business Value Delivered
The programme delivered measurable improvements in employee security awareness and human risk management across the organisation.
Phishing susceptibility was reduced to below 4%, aligning with recognised industry good practice and demonstrating a significant improvement in employee resilience against phishing-based attacks.
- Reduced phishing susceptibility to below 4%
- Improved employee cyber awareness
- Increased reporting of suspicious emails
- Reduced organisational cyber risk
- Embedded a security-first culture
- Improved executive visibility through security metrics
Technology Stack
Microsoft Defender
CultureAI
Microsoft 365
Security Awareness Platform
Services Delivered
- Security Awareness
- Human Risk Management
- Cybersecurity Training
- Executive Reporting
Through a structured and continuous Security Awareness & Human Risk Management Programme, Abiryva helped the organisation build a more cyber-aware workforce and significantly reduce human-related cybersecurity risk.
By combining behavioural insights, targeted education, simulated phishing campaigns, and executive-level reporting, the organisation created a stronger security culture where employees became an active and informed part of its cybersecurity defence.