Axon's Information Security Program faced the challenge of aligning all employees, contractors, and service providers with the annually updated information security principles. In a rapidly evolving technological landscape with complex computing interactions, it's crucial to ensure that every individual comprehensively understands and integrates these principles into their daily practices to safeguard Axon's data, systems, and assets.
To meet the evolving needs of the information security at Axon, it was decided that an interactive web-based training module that ensured consistent employee awareness and understanding of information security principles should be introduced. The training also needed to align with Axon's culture, engage the predominantly young workforce, and integrate seamlessly with the broader incentive program. Additionally, it was required to serve the dual purpose of annually reinforcing knowledge for existing employees while effectively onboarding new hires during orientation, thereby promoting a culture of continuous learning and vigilance in information security.
To ensure Axon employees understand and embrace the recommended ten security principles, Constellar Consulting developed a gamified web-based training. This engaging approach combined cognitive and effective learning, offering visually stimulating challenges, decision-making scenarios, and customized feedback. The training incorporated humor and followed a cohesive visual theme, fostering a sense of responsibility and improving engagement among learners. The module had eye-catching visuals that consistently retained learner attention. It was designed to be user-friendly, intuitive, and minimalistic, making the experience very immersive.
The gamified approach was a hit! Learners loved the realistic challenges that made them feel like security superheroes. They left the training feeling more confident and committed to protecting Axon's information.
Stakeholders praised the real-life scenarios, resulting in consistently low security incident rates. Axon's proactive measures enhanced data and system security, fostering trust with customers and stakeholders. Employees actively contribute to risk mitigation, bolstering overall security.
Certain security incident outcomes are now consistently measured, such as incidents that result from employees clicking on phishing emails. The rates of phishing incidents at Axon remain very low, due to years of consistent training, including this most recent training. The specific points covered in the training were selected and prioritized based on the most common causes for security incidents, as well as compliance/audit failures.
