Security awareness

Metropolitan School District of Wayne Township Combats Ransomware with SecurityIQ

Kristin Zurovitch
July 17, 2018 by
Kristin Zurovitch

Personalized security awareness education and network of trained security champions creates district-wide, cyber-alert culture

InfoSec Institute, the leading provider of IT security education and workforce security awareness training solutions, announced the Metropolitan School District (MSD) of Wayne Township, Indiana selected SecurityIQ for district-wide security awareness education. Pairing SecurityIQ with the district’s personalized learning techniques and an internally-developed network of trained security champions, MSD Wayne significantly decreased their phishing attack rate and ransomware susceptibility.

Before SecurityIQ, MSD Wayne experienced an onslaught of four ransomware attacks, one of them crippling an applications database. For Pete Just, MSD Wayne’s CTO, this was the warning and opportunity to strengthen his district’s security strategy. He enrolled all faculty and staff in SecurityIQ awareness training to strengthen their social engineering defenses. Since then, the district has been ransom-free for 18 months. The success of MSD Wayne’s program draws on Just’s former years as an instructor. He pairs these four education best practices with SecurityIQ’s capabilities to boost learning outcomes:

Strengthen security awareness with human risk management

Strengthen security awareness with human risk management

Infosec HRM, powered by Right-Hand Cybersecurity, provides alert-based training nudges to minimize human risk at your organization. 

1) Data-Driven Insights

It all starts with appraising each staff member’s knowledge about phishing and malware risks using SecurityIQ’s learner assessments and phishing simulations. “We teach our faculty to tailor their student learning through actionable classroom data,” said Just. The same holds true when educating his staff district-wide. “If we want to teach them something new, we first assess what they know, rather than making them sit through a three-hour training.”

 2) Personalized Learning

Applying the same 1:1 personalized learning approach that helped his district boost student graduation rates, Just leverages SecurityIQ’s massive training library to automatically deliver modules tailored to each staff member’s assessed security aptitude and role. The SecurityIQ Content Library for Education specifically addresses educator security risks and compliance requirements for FERPA, COPPA and more. Important to Just was having training closely associated with learner clicks. “We needed the ability to determine who received what training and why and receive regular reports as campaigns were in progress,” he said.

3) Positive Reinforcement

“Training shouldn’t be punitive. That’s one of the things I like about how we use SecurityIQ,” said Just. “It starts with how you announce your program. It can’t be about ‘gotcha’ moments and negative feedback. If you start that way, you're probably going to have problems. It’s a learning opportunity and way to avoid future attacks.” Just also recommends reinforcing the benefits of awareness training for staff’s personal security hygiene, keeping his team and their families safe online both at home and work.

4) Internal Champions

Leveraging the support and influence of peers has a profound impact on any education initiative. With 2,500 employees, Just knew he needed to look outside his department to help introduce the new security awareness program. He enlisted help from a group of 40 teachers and tech assistants throughout the district. “We told them we were getting ready to start this program, showed them what to expect and offered train-the-trainer sessions.” Called the iTEC team, this group helps field staff questions and gets everyone on the same page. “We have 1,200 teachers – not all of them know who I am.This approach is more effective,” said Just.

“School districts like MSD Wayne are leading the pack when it comes to developing a pervasive culture of cyber-awareness,” said Jack Koziol, InfoSec Institute CEO and Founder. “Their personalized training techniques and ‘it takes a village’ approach play a critical role in keeping their district, staff and student data private and secure. We’re excited and proud to have SecurityIQ at the heart of their awareness program.”

Read MSD Wayne Township’s complete SecurityIQ success story.

About Metropolitan School District of Wayne Township

Located in the heart of Indiana, MSD Wayne Township is home to 16,500 students, 2,500 employees and over 15,000 computing devices. Its mission is to provide multiple pathways for learning that meet or exceed present and future goals and aspirations of their community through partnership with students, school staff, parents, civic groups, business owners, government, faith-based organizations and the community at large. At the core of their strategy is student success – child through lifelong adulthood.

About InfoSec Institute

InfoSec Institute fortifies organizations of all sizes against security threats with award-winning information security education. Recognizing cybersecurity is everyone’s job, the company provides skills development and certification training for IT and security professionals while building the entire workforce’s security aptitude through awareness training and phishing simulations. Recognized as a Gartner Peer Insights Customers’ Choice for Security Awareness Computer-Based Training, InfoSec Institute is also a Training Industry “Top 20 IT Training Company” and the Security Training & Education Program Gold Winner in Info Security Products Guide’s Global Excellence Awards.

Phishing simulations & training

Phishing simulations & training

Build the knowledge and skills to stay cyber secure at work and home with 2,000+ security awareness resources. Unlock the right subscription plan for you.

 

Kristin Zurovitch
Kristin Zurovitch

Director of Corporate Communications, InfoSec Institute