Developing a Gamified Cybersecurity Training Program for Remote Work

Abstract

Remote work has increased since the COVID-19 pandemic. This increase requires stronger protection for the organization’s network, devices, and applications. It also requires enhanced security measures to mitigate cyber threats. Regulations and the rise in cyberattacks mandate organizations to train employees on the latest cybersecurity threats and attack techniques. In this work, we develop an interactive web game that raises employee awareness and improves their understanding of the latest cyber threats. The Cyber Battle game consists of three phases, with three scenarios per phase. The password complexity phase educates employees on password complexity, periodic password changes, and secure password storage. The phishing attack phase trains employees on identifying and handling phishing emails. Finally, the remote working phase trains employees on secure personal device usage and document handling when working remotely. To offer an enjoyable and interactive learning experience, we incorporate gamified learning elements into the Cyber Battle game, such as a point system to track progress, progressive levels with gradually increased difficulty, and a leaderboard to encourage healthy competition. We assessed the game’s effectiveness using pre- and post-game surveys. The game and survey results show an improvement in employees’ cybersecurity awareness. Furthermore, employees provide positive feedback and consider the game a more useful and interactive learning tool than traditional training programs.