Strengthening Cybersecurity Awareness for a Small Business with Recyber

Overview

A London Accounting firm specialising in tax consulting and financial advisory, for UK and US/EMEA clients, faced a growing concern regarding cyber threats. With an increase in phishing attempts and social engineering attacks targeting the financial sector, the firm needed a robust solution to improve cybersecurity awareness among employees. Protecting sensitive client data and maintaining compliance with industry regulations was a top priority.

The CEO of the firm wanted to demonstrate such commitment to cyber best practices, through an employee awareness programme. Such initiatives fortify the overall cybersecurity posture by transforming the company’s culture towards recognising known and unknown cyber threats.

Requirement

The firm identified several key challenges:

  • Low Employee Awareness: Despite having technical safeguards in place, many employees were unaware of modern cyber threats, making them susceptible to phishing emails and fraudulent schemes.
  • Compliance Requirements: As part of their regulatory obligations, the firm needed to ensure ongoing cybersecurity training for all staff.
  • Limited Training Engagement: Previous training methods, such as static presentations, failed to engage employees or create long-lasting behavioural changes.

 

“ We have found that the annual cyber training fizzled out weeks after its deployment, while new hires often slipped through the system without completing such training. We decided to move away from an annual Cyber Day training and towards an ongoing alertness culture across our staff.

We were seeking a cultural change, not another set of training materials. Among the shortlisted vendors we found that Recyber stood out with their Data Privacy, End User Anonymity, and Staff Psychological Safety philosophy in the design of the service.

Turns out it was that capacity to protect the user’s privacy, that has led to great adoption across all our offices. We have observed an adoption over 90% of the service and this will translate in significant reduction of incidents, and quicker reporting of threats as they occur.”

– CEO of the London Accounting firm

The firm’s adoption and performance data is on par with deployments across Recyber’s customer base that demonstrate a significant reduction in the number of incidents, and time-to-discover, a key metric in reducing the impact of an incident.

Recyber’s challenges with the London Accounting firm was to communicate the importance of the Human Layer.

“Network and Endpoint Security can be bypassed by today’s complex social engineering attacks, it only takes one end user to dial a wrong number or log in into a fake site.” said Andrew Clarke CEO of Recyber.

Solution

Recyber partnered with the London Accounting firm to deliver a tailored cybersecurity awareness training program. The solution included:

  1. Interactive Training Modules: Engaging, scenario-based modules focused on real-world cyber threats like phishing, ransomware, and social engineering.
  2. Phishing Simulations: Regular, realistic phishing email tests to assess and improve employee response rates over time.
  3. Comprehensive Reporting: Analytics dashboards to track progress, identify high-risk users, and demonstrate compliance.
  4. A real time dashboard: a holistic view of the overall firm’s readiness that could be used for demonstrating regulatory compliance to industry frameworks.

Deployment Challenges

The firm’s management was concerned about the impact of the Republic service on the day-to-day staff productivity.

“We do want a trained and alert staff, but we cannot slow down operational efficiency with the same human resources on hand. Whatever positive effect we achieve it must not interrupt the office workflows and department performance. This was a requirement that we clearly communicated to Recyber during our kick off meeting with Recyber’s Customer Success Team” London firm’s HR Director.

With bite-sized micro-training, non-intrusive questions, and real time coaching nudges, fun mini educational videos, and voluntary anti-phishing tests, Recyber’s service does not stop an employees’ daily routine. At the same time the platform maps user performance data against a proprietary framework of 181 behavioural attributes, to deliver tailored interventions for each user.

Results

After implementing Recyber’s cybersecurity awareness program, the Accounting Firm achieved remarkable outcomes:

  • Reduced Phishing Susceptibility: Phishing simulation failure rates dropped by 70% within six months, showcasing improved employee vigilance.
  • Enhanced Employee Confidence: Over 95% of staff reported feeling better equipped to recognize and respond to potential cyber threats.
  • Compliance Achieved: The firm successfully met regulatory training requirements and received positive feedback during audits.
  • Sustained Engagement: Gamified training features and ongoing content updates kept employees engaged, leading to a continuous culture of cybersecurity awareness.

Learn how Recyber can Protect your company

Through Recyber’s tailored cybersecurity awareness program, the Accounting Firm not only strengthened its defence against cyber threats but also fostered a culture of proactive security. This success story highlights the importance of equipping employees with the knowledge and tools needed to safeguard sensitive information in today’s digital landscape.

Learn more about how Recyber can help your organisation below:

Please let us know what's on your mind. Have a question for us? Ask away.