Before Infosec IQ, MSD Wayne experienced an onslaught of four ransomware attacks, one of them crippling an applications database. For Pete Just, MSD Wayne’s CTO, this was the warning and opportunity to strengthen his district’s security strategy. He enrolled all faculty and staff in Infosec IQ awareness training to strengthen their social engineering defenses. Since then, the district has been ransom-free for 18 months. The success of MSD Wayne’s program draws on Just’s former years as an instructor. He pairs these four education best practices with Infosec IQ’s capabilities to boost learning outcomes:

  1. Data-Driven Insights It all starts with appraising each staff member’s knowledge about phishing and malware risks using Infosec IQ’s learner assessments and phishing simulations. “We teach our faculty to tailor their student learning through actionable classroom data,” said Just. The same holds true when educating his staff district-wide. “If we want to teach them something new, we first assess what they know, rather than making them sit through a three-hour training.”  2) Personalized Learning Applying the same 1:1 personalized learning approach that helped his district boost student graduation rates, Just leverages Infosec IQ’s massive training library to automatically deliver modules tailored to each staff member’s assessed security aptitude and role. The Infosec IQ Content Library for Education specifically addresses educator security risks and compliance requirements for FERPA, COPPA and more. Important to Just was having training closely associated with learner clicks. “We needed the ability to determine who received what training and why and receive regular reports as campaigns were in progress,” he said.
  2. Positive Reinforcement “Training shouldn’t be punitive. That’s one of the things I like about how we use Infosec IQ,” said Just. “It starts with how you announce your program. It can’t be about ‘gotcha’ moments and negative feedback. If you start that way, you’re probably going to have problems. It’s a learning opportunity and way to avoid future attacks.” Just also recommends reinforcing the benefits of awareness training for staff’s personal security hygiene, keeping his team and their families safe online both at home and work.
  3. Internal Champions Leveraging the support and influence of peers has a profound impact on any education initiative. With 2,500 employees, Just knew he needed to look outside his department to help introduce the new security awareness program. He enlisted help from a group of 40 teachers and tech assistants throughout the district. “We told them we were getting ready to start this program, showed them what to expect and offered train-the-trainer sessions.” Called the iTEC team, this group helps field staff questions and gets everyone on the same page. “We have 1,200 teachers – not all of them know who I am.This approach is more effective,” said Just. “School districts like MSD Wayne are leading the pack when it comes to developing a pervasive culture of cyber-awareness,” said Jack Koziol, Infosec CEO and Founder. “Their personalized training techniques and ‘it takes a village’ approach play a critical role in keeping their district, staff and student data private and secure. We’re excited and proud to have Infosec IQ at the heart of their awareness program.” Read MSD Wayne Township’s complete Infosec IQ success story. About Metropolitan School District of Wayne Township Located in the heart of Indiana, MSD Wayne Township is home to 16,500 students, 2,500 employees and over 15,000 computing devices. Its mission is to provide multiple pathways for learning that meet or exceed present and future goals and aspirations of their community through partnership with students, school staff, parents, civic groups, business owners, government, faith-based organizations and the community at large. At the core of their strategy is student success – child through lifelong adulthood. About Infosec Infosec fortifies organizations of all sizes against security threats with award-winning information security education. Recognizing cybersecurity is everyone’s job, the company provides skills development and certification training for IT and security professionals while building the entire workforce’s security aptitude through awareness training and phishing simulations. Recognized as a Gartner Peer Insights Customers’ Choice for Security Awareness Computer-Based Training, Infosec is also a Training Industry “Top 20 IT Training Company” and the Security Training & Education Program Gold Winner in Info Security Products Guide’s Global Excellence Awards.