Improving their human risk management

Bilfinger recognised the importance of the human element in cyber security. Aware that nearly all successful cyber attacks involve email as a key attack vector, they aimed to enhance their employees’ preparedness. Strengthening this human aspect was identified as the main goal to bolster overall security resilience.

Bilfinger chose SoSafe for their specialized expertise in knowledge transfer and education. SoSafe’s approach focuses on using tools that have a real impact on learners. This method involves mirroring real-world scenarios, which allows employees to apply their learning practically through simulations. The strategy proved effective in educating the workforce about recognizing potential threats and significantly enhancing the security culture.

The implementation of SoSafe’s programme led to a notable increase in threat reporting, driven by heightened awareness and more accessible reporting options. This improvement reflects a significant shift in employee behaviour across all levels, from frontline staff to senior management, demonstrating a deeper understanding of potential cyber threats. The behavioural changes, along with other strategic measures, have fostered a more security-aware culture within the organisation. Collectively, these efforts have positioned Bilfinger as a model for effective human risk management in cyber security.