[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"detail-sidebar-cat-1-en-105":3,"doc-seo-359204-105":53,"doc-detail-359204-en":127},{"code":4,"msg":5,"data":6},0,"success",[7,14,19,24,29,34,39,44,49],{"id":8,"doc_module":9,"doc_module_name":10,"category_name":11,"show_sort_weight":12,"slug":13},11,1,"Template","Presentations",90,"presentations",{"id":15,"doc_module":9,"doc_module_name":10,"category_name":16,"show_sort_weight":17,"slug":18},12,"Resumes",80,"resumes",{"id":20,"doc_module":9,"doc_module_name":10,"category_name":21,"show_sort_weight":22,"slug":23},14,"Invoices",70,"invoices",{"id":25,"doc_module":9,"doc_module_name":10,"category_name":26,"show_sort_weight":27,"slug":28},15,"Posters",60,"posters",{"id":30,"doc_module":9,"doc_module_name":10,"category_name":31,"show_sort_weight":32,"slug":33},16,"Social Media",50,"social-media",{"id":35,"doc_module":9,"doc_module_name":10,"category_name":36,"show_sort_weight":37,"slug":38},17,"Forms",40,"forms",{"id":40,"doc_module":9,"doc_module_name":10,"category_name":41,"show_sort_weight":42,"slug":43},18,"Letters",30,"letters",{"id":45,"doc_module":9,"doc_module_name":10,"category_name":46,"show_sort_weight":47,"slug":48},21,"Paper Templates",5,"papers-templates",{"id":50,"doc_module":9,"doc_module_name":10,"category_name":51,"show_sort_weight":4,"slug":52},158,"General","general-158",{"code":4,"msg":54,"data":55},"ok",{"site_id":56,"language":57,"slug":58,"title":59,"keywords":60,"description":61,"schema_data":62,"social_meta":120,"head_meta":122,"extra_data":124,"updated_unix":126},105,"en","ar-in-a-box-building-a-custom-cyber-awareness-program","AR-in-a-Box - Building a Custom Cyber Awareness Program","","AR-in-a-Box outlines how to build a custom cyber awareness program spanning multiple activities over a long period, aligned with an organization’s cybersecurity strategy. It explains why organizations need employee-focused training due to evolving threats and social engineering that can bypass technical defenses. The plan covers objectives, roles, target audience segmentation, behavior change methods, and program implementation steps, including evaluation and guidance for ISO 27001 clause 7.2.2 awareness training.",{"@graph":63,"@context":119},[64,80,102],{"@type":65,"itemListElement":66},"BreadcrumbList",[67,71,74,77],{"item":68,"name":69,"@type":70,"position":9},"https://docshare.wps.com","Home","ListItem",{"item":72,"name":10,"@type":70,"position":73},"https://docshare.wps.com/template/",2,{"item":75,"name":11,"@type":70,"position":76},"https://docshare.wps.com/template/presentations/",3,{"item":78,"name":59,"@type":70,"position":79},"https://docshare.wps.com/template/ar-in-a-box-building-a-custom-cyber-awareness-program/359204/",4,{"url":78,"name":59,"@type":81,"image":82,"author":87,"headline":59,"publisher":90,"fileFormat":93,"inLanguage":57,"description":61,"dateModified":94,"datePublished":95,"encodingFormat":93,"isAccessibleForFree":96,"interactionStatistic":97},"DigitalDocument",{"url":83,"@type":84,"width":85,"height":86},"https://docshare.wps.com/thumbnails/ar-in-a-box-building-a-custom-cyber-awareness-program/359204.png","ImageObject",442,249,{"name":88,"@type":89},"Melati","Person",{"url":68,"name":91,"@type":92},"DocShare","Organization","application/pdf","2026-10-27","2026-09-23",true,{"@type":98,"interactionType":99,"userInteractionCount":101},"InteractionCounter",{"@type":100},"ViewAction",7,{"@type":103,"mainEntity":104},"FAQPage",[105,111,115],{"name":106,"@type":107,"acceptedAnswer":108},"What is the AR-in-a-Box cyber awareness program intended to achieve?","Question",{"text":109,"@type":110},"It is a long-term plan covering multiple awareness activities that teaches employees how to mitigate cyber threats and promotes a cyber-security culture through training, materials, and exercises.","Answer",{"name":112,"@type":107,"acceptedAnswer":113},"Why does the program emphasize employee awareness rather than only technical defenses?",{"text":114,"@type":110},"The content states that organizations can’t rely solely on technological defenses because new threats and sophisticated social engineering can succeed when one employee clicks a malicious link.",{"name":116,"@type":107,"acceptedAnswer":117},"How should organizations structure the program?",{"text":118,"@type":110},"The document outlines steps including identifying objectives, securing financial and human resources, splitting employees into target groups, implementing the program, and evaluating outcomes.","https://schema.org",{"og:url":78,"og:type":121,"og:title":59,"og:site_name":91,"og:description":61},"article",{"robots":123,"canonical":78},"index,follow",{"doc_id":125,"site_id":56},359204,1791738996,{"code":4,"msg":5,"data":128},{"doc_id":125,"user_id":129,"nickname":88,"user_avatar":130,"doc_module":9,"category_id":8,"category_name":11,"doc_title":59,"doc_description":61,"doc_content":131,"file_id":132,"file_url":133,"file_type":134,"file_size":135,"view_count":101,"is_deleted":4,"is_public":9,"is_downloadable":9,"audit_status":9,"page_count":136,"language":137,"language_code":57,"site_id":56,"html_lang":57,"table_of_contents":138,"faqs":139,"seo_title":140,"seo_description":61,"update_tm":141,"read_time":142},962085570644,"https://ap-avatar.wpscdn.com/davatar_994ba38a5ba835b3df7d355c54d3ed8d","AR-IN-A-BOX : BUILDING A CUSTOM CYBER AWARENESS PROGRAM  \nDimitra Liveri  \nTeam Leader for Awareness raising and Education  \n12  10  2022  \nCYBER AWARENESS PROGRAM  \nA plan encompassing multiple awareness raising activities over a long period of time following the organizational  \nstrategy for cybersecurity  \n• Teaches employees how to mitigate the impact of cyber threats.  \n• Incorporates activities, materials and training to promote a culture of cyber security.  \nWHY HAVE ONE?  \n➢ New threats are emerging.  \n➢ Organizations can no longer just rely on their technological defenses to be safe.  \n➢ Cybercriminals use sophisticated social engineering techniques to by-pass defenses.  \n➢ All it takes is one employee to click on a malicious link and it’s game over!  \n➢ Your employees are your first line of defense.  \nA comprehensive Cyber Security Awareness program is the best way to educate staff and create a security-first  \nculture.  \n3  \nSTILL NOT SURE?  \nISO 27001/2 & Information Security Awareness Training  \nFor ISO 27001 compliance, it is essential to comply with clause 7.2.2 .  \n4  \nHOW TO BUILD THE PROGRAM  \nIdentify objectives  \nSecure financial resources  \nEnsure human resources  \nSplit your employees into target groups  \nChoose the right implementation means  \nImplement the program  \nEvaluate the  \nprogram  \n5  \nIDENTIFY OBJECTIVES  \n• Evaluate the threat landscape and identifying your top risks.  \n• Find or develop the right training.  \n• Every organization has a different threat profile.  \n• Be sure to cover: phishing, malware, and poor security practices.  \n• Phishing is behind 71% of all cyber attacks worldwide.  \n6  \nThreat Landscape—ENISA (europa.eu)  \n7  \nROLES  \nCreating a team of Experts cultivates Culture Use rolling roles!  \n• Management  \n• Cyber Security Officer  \n• Heads of Departments  \n• Public Relations  \n• ICT  \n• HR  \n• DPO / LEGAL  \n8  \nIDENTIFY TARGET AUDIENCE  \n\n|  | Audience groups | \u003Cbr>Clustered audiences |\n| --- | --- | --- |\n| 1 | Generic Employee |  |\n| 2 | Contractor |  |\n| 3 | HR | Generic Employee |\n| 4 | Communications & Marketing |  |\n| 5 | Legal |  |\n| 6 | Operations & R&D |  |\n| 7 | Finance & Procurement |  |\n| 8 | Managers, Officers | C-Level, Decision Makers, Handling budgets |\n| \u003Cbr>9 | \u003Cbr>Head of Unit, Directors |  |\n| 10 | Cybersecurity professionals | Professionals / Horizontal implementors of cybersecurity actions and users of cybersecurity solutions, working for organisations and/or |\n| 11 | IT professionals | individuals |\n\n9  \nCHANGE BEHAVIOR  \n• We are not in the ’00, forget boring classrooms.  \nEmployees need to be engaged  \n• Training needs to be role-specific, tailored, fun, and address daily challenges  \n• Make it Audience Specific  \n• Provide easily consumable content (videos, realistic scenarios, quizzes, policies and real-world phishing simulation tests)  \n• Utilize communications & marketing tools such as blogs, awareness posters  \n• Break the culture barrier that cyber security is an IT thing  \n10","cbCaiumVlWtADG2d","https://ap.wps.com/l/cbCaiumVlWtADG2d","pdf",1423997,25,"English","# Cyber Awareness Program\n## Why Have One\n## Still Not Sure? ISO 27001/2 & Awareness Training\n## How to Build the Program\n## Identify Objectives\n## Roles\n## Identify Target Audience\n## Change Behavior","[{\"question\":\"What is the AR-in-a-Box cyber awareness program intended to achieve?\",\"answer\":\"It is a long-term plan covering multiple awareness activities that teaches employees how to mitigate cyber threats and promotes a cyber-security culture through training, materials, and exercises.\"},{\"question\":\"Why does the program emphasize employee awareness rather than only technical defenses?\",\"answer\":\"The content states that organizations can’t rely solely on technological defenses because new threats and sophisticated social engineering can succeed when one employee clicks a malicious link.\"},{\"question\":\"How should organizations structure the program?\",\"answer\":\"The document outlines steps including identifying objectives, securing financial and human resources, splitting employees into target groups, implementing the program, and evaluating outcomes.\"}]","AR-in-a-Box - Building a Custom Cyber Awareness Program | PDF",1790136399,9]