Your Free Cybersecurity Awareness Month Resource Kit Is Ready
Prepare your agents for current and future cyber threats with this loadout of assets.
Make full use of this year’s load-out of cybersecurity tools, equipment and specialists as part of an elite team known as “the Workforce Risk Division.” You’ll help your users embark on four week-long missions each focusing on a specific cyber threat.
This guide walks you through user resources included in your kit, suggestions for how to use them, and campaign ideas to get you started.
This web-based training planner is packed with all of the great resources for users you see below.
This workforce risk division is giving your team limited-time access to some of our most valuable assets.
Join Martin Kraemer, KnowBe4 CISO Advisor, for a deep dive into the practicalities of securing your AI adoption and onboarding a new class of "digital colleagues."
Read this whitepaper to learn how to secure the hybrid workforce by managing human and AI agent risk together.
Week 1:
Phishing and Social Engineering
The most sophisticated spies don't break in; they talk their way in. This week focuses on the subtle red flags of social engineering that technical filters might miss and how to spot them.
Interactive Training Module: Smishing Frenzy
This seven-minute module introduces the dangers of smishing, or text-message-based phishing, and shows how your users can avoid becoming another victim of this type of cyberattack.
Your employees will learn:
- How cybercriminals can use social engineering through text messages
- What smishing typically looks like
Tabletop Exercise Asset - Unmasking Phishing and Whaling Attacks
This tabletop exercise equips employees to identify and respond to sophisticated phishing and whaling attacks. Participants analyze a simulated CEO fraud email to differentiate between AI-generated false trust indicators and true behavioral warning signs. Designed for all employee levels to practice applying critical thinking and your organization's official procedures.
Don't Get Hooked: Report Every Phishing Attempt Poster
Poster-style reminder of common signs of a phishing email and what to do if you suspect something phishy
Your Role in Internet Security Doc
Infographic-style asset reminding users of the most common cybercrime tactics and how to avoid them
Download All Week 1 Assets
Week 2:
AI Safety and Deepfakes
Delve into the seedy underbelly of AI to teach users how bad actors use generative tools to create perfect clones and scripts. Your agents must rely on their most valuable asset, their critical thinking skills, to verify what’s real.
Video Module - A Deepfake Social Engineering Attack
This six-minute video module features members of the cast of the popular security awareness series “The Inside Man” demonstrating how cybercriminals are using AI voice cloning and video deepfake technology to impersonate people you may know.
Your employees will learn:
- How cybercriminals can use deepfakes and social engineering to compromise an organization’s defenses through simple requests
- Red flags to watch for to protect yourself and your organization from sophisticated deepfake attacks
Training Module - Protecting Intellectual Property
This 10-minute training module, available from the KnowBe4 Compliance Plus library, explains the importance of intellectual property, or IP.
Your employees will learn:
- What IP is and why it is so valuable
- How to protect IP from theft, infringement and accidental exposure, including via use by artificial intelligence
Tabletop Exercise Asset - The AI Prompt Challenge
This tabletop exercise equips employees to identify the risks of using unsafe prompts in the workplace. Participants will analyze AI prompts to select which ones are safe and which ones put private data at risk. Designed for all employee levels to practice critical thinking and follow their organization's policies.
Real or Fake? Spotting Deepfakes
Poster-style reminder to use context clues and critical thinking to help identify deepfakes in the wild
Phishing Gets Smarter: How AI Is Changing Online Scams
Infographic-style asset that explains how AI is making phishing scams harder to detect
Download All Week 2 Assets
Week 3:
Data Security and Passwords
Sensitive data is currency in the modern world; and bad actors are willing to do anything to get it. Make sure your agents know the value of what they protect and what’s at stake if it gets out. This week focuses on using password managers and MFA to ensure that even if an agent is compromised, the agency's data stays encrypted.
Mobile-First Training Module - Strong Passwords, Secure Accounts
This five-minute module, designed for use on mobile devices, details the importance of secure passwords and passphrases in your users work and home lives.
Your employees will learn:
- Tips on creating strong, secure passwords and using passphrases effectively
- How to avoid common security mistakes that leave accounts vulnerable
- Best practices for securing passwords and passphrases
Tabletop Exercise Asset The Password Guessing Game
This tabletop exercise gives employees a simulated role as a hacker to experience cracking weak passwords. Participants will examine social media posts and try to guess their owners’ passwords only from the information shared online. This exercise demonstrates how the combination of oversharing online and having weak password practices makes it easier for bad actors to brute-force their way into account.
Strong Passwords Protect Your Online Peace
Poster-style asset focusing on the importance of strong passwords
Sensitive Data: Keep it Secret, Keep it Safe
Infographic-style document explaining the basics of keeping sensitive information secure and why to do so
Download All Week 3 Assets
Week 4:
Incident Reporting
In the Workforce Risk Division, keeping ears to the ground is a vital part of an operation. No agent can get through any mission alone, so it’s crucial your agents know the importance of telling the team when something doesn’t seem quite right. This week ensures every agent knows exactly how to signal for backup when they see something suspicious.
Audiocast - Hack-Proof Habits: Reporting
This 15-minute audiocast, split into five and 10-minute modules, discusses the importance of reporting security threats.
Your employees will learn:
- Potential barriers to reporting that can occur when faced with a security threat
- Why reporting is such a critical step in fighting cybercrime
- A decision-making process they can use to analyze situations and choose safe actions
Game - Pursuit of Privacy
This 15-minute interactive game will improve your users’ understanding of international data privacy laws through a challenging, globe-trotting adventure that will sharpen their compliance knowledge.
Your employees will learn:
- The importance of data privacy regulations
- Different regional and international approaches to data privacy
Tabletop Exercise Asset - Incident Response
This comprehensive incident response lesson plan guides corporate employees through tabletop exercises simulating security crises. The practice accommodates participants of any technical level, focusing on role identification, decision-making and team coordination. Activities include prioritizing response checklists and conducting realistic scenario simulations with complications. Participants will learn established incident response procedures, cross-functional communication, and adaptability during security incidents through practical exercises and structured debriefing sessions.
One Report, Shared Protection Poster
Poster-style asset that highlights the importance of promptly reporting suspicious emails to protect personal information, colleagues and client data
Phishing, Physical Security, and Data Breaches, Oh My! Infographic
Infographic-style asset reminding users why immediately reporting security concerns stops small issues from becoming major incidents