SAFE in practice
What you can expect from the SAFE program
> Services for your people > SAFE in practice
The basic steps of SAFE
How does SAFE work in practice? Each SAFE awareness program follows the same basic steps. We constantly measure the effects of the program, to make sure we're using the best interventions for your organization.
SAFE in practice
To effect any kind of change, we need to know where your organization stands at the moment. That's why we start with a baseline measurement. This includes a measurement of current behavior, ability, motivation and opportunity. The measurement uses a variety of methodologies, so it goes much further than a standard survey. With the outcome of the baseline measurement we can define the goals of the program.
Basic program for the whole organization
SAFE's basic program is then rolled out for the whole organization. All three factors of behavior receive repeated attention: Keeping the necessary knowledge up to date, boosting motivation and establishing the right culture. This is done in various ways, for instance using social engineering and road shows. The repeated attention to these three factors is necessary to activate the topic of information security and to remind and enable employees to behave safely.
Tailored program for focus groups
In addition to the basic program, a tailored program runs every quarter for the focus group of that specific quarter. This approach is repeated in the second year, so each focus group receives repeated attention. For each focus group, we identify specific goals, given the nature of their work. Which safe behavior should each group ideally display?
Barrier assessments and interventions
We use so-called barrier assessments for each focus group, to investigate what is withholding this focus group from the target behavior. These insights are then translated into concrete interventions: what does this focus group need to actually display the desired behavior? For example, sometimes the analysis will show that the focus group benefits most from experiencing the urgency of an incident simulation. Another time it might be necessary to create support by setting up an ambassador network, increasing motivation through a hack demo, or a highly targeted e-learning module to update a specific gap in knowledge.
All these assessments and interventions should lead to actual behavioral change - the goal of the SAFE program. At the end of the year, the measurements from the baseline measurement are repeated to check the effects of the program.
Do you have a question about our SAFE Security Awareness Program? Contact us now.
More about safe
SAFE - Security Awareness & Behavior Program
Theory Behind SAFE
SAFE program explained
Secura is a leading cybersecurity expert. Our customers range from government and healthcare to finance and industry worldwide. Secura offers technical services, such as vulnerability assessments, penetration testing and red teaming. We also provide certification for IoT and industrial environments, as well as audits, forensic services and awareness training. Our goal is to raise your cyber resilience.
Secura is a Bureau Veritas company. Bureau Veritas (BV) is a publicly listed company specialized in testing, inspection and certification. BV was founded in 1828, has over 80.000 employees and is active in 140 countries. Secura is the cornerstone of the cybersecurity strategy of Bureau Veritas.