NZ Customs needed to raise security awareness organisation-wide and at the same time comply with the Government's mandatory security requirements.
鈥淭he module had lots of important learnings to take away but the (latent) gamer in me found barely a dull moment. I was trying scenarios out in many different variations to discover 'what if?' options. The graphics and comic book effects are so entertaining you forget you are doing 'learning.' Excellent module!鈥濃
Read on to find out how the partnership between 小优传媒 and Customs created an innovative, engaging, impactful and practical solution which combatted the online and e-learning fatigue that existed post COVID-19.
Customs鈥 purpose is to protect and promote New Zealand across borders which means Customs has a responsibility to protect its people and the information it holds. It is vital Customs gets security right and raising organisational security awareness was the challenge that this learning campaign needed to address.
After the shift to working from home because of COVID-19, lots of Zoom meetings and pretty much all learning being done online, New Zealand Customs鈥 staff were fatigued and unexcited by the prospect of more e-learning. The level of security awareness around personal, physical and information security across Customs varied from basic to very aware.
The New Zealand Government鈥檚 Protective Security Requirements (PSR) assessment identified the need to 鈥榖uild security awareness鈥 across the organisation to meet heightened expectations on government agencies. Alongside the PSR assessment were the results of the internal Customs security survey which highlighted that some staff felt overwhelmed by the number of security expectations. The security awareness level needed raising and staff wanted to do the right thing but felt they didn鈥檛 have the knowledge, or they learned, then forgot.
A timed and layered approach was used to align with other security-themed events (i.e. Security week, Cyber security week), and the launch of updated security policies.鈥疶he two targeted refresher modules meant learners were able to revisit a topic in more detail and keep security awareness front of mind every few months to embed the learning and the habits.鈥
Customs knew the Security Awareness learning needed to appeal to all Customs staff and, bearing in mind the online and e-learning fatigue that existed at the time, a variety of media should be employed to deliver the security awareness message. The Security Awareness learning campaign used types of learning that had not typically been used at Customs before like posters, screensavers and a graphic-novel-type approach in the modules. Customs wanted to change people鈥檚 perspective of learning.
The look and feel were kept consistent across all the learning products created so they became identifiable as being a part of the learning campaign.
The following deliverables formed a campaign-style approach to the learning:
All scenarios used were personalised to Customs employees: relatable and practical.鈥
They deliberately incorporated the simple, everyday things people take for granted.鈥
The Insider Threat module had a 鈥榳hodunnit鈥 concept giving the learner the ability to step into the world of each character before deciding the answer. The e-learning modules in particular really covered the 鈥榃hy should I care?鈥 for the learner.
Branching scenarios were used within the e-learning to give the learner control over what they saw; if they selected the correct course of action in a scenario they could then go and see the consequences of having gone in another direction. This style of interactive learning scenarios puts the learner in a real-life situation which they can relate to from their own experience on the job.
It was necessary to use plain English in the modules and keep them short, relevant and non-technical, but also important to incorporate a level of complexity to keep learners engaged.
It was a well-rounded learning campaign that set out to not just to teach something but shift the organisation鈥檚 mindset and security culture.鈥疻ord reached the Central Government Security Agency which ended up asking for access to the Customs modules and taking some of the concepts and content from two of the modules to include in the design of their modules for use across all government agencies.鈥
The graphic-novel style of the modules was completely new to Customs and this really captured the imagination of staff. The concept of melding the comic-style graphics with real pictures in the background鈥痺as very well received and reinforced the care and customisation of the content for its intended audience.鈥
An evaluation plan was developed before the campaign was launched which was designed to gauge the following:鈥
Customs saw a definite shift in security culture/staff being more security aware. There has been a substantial increase in staff reporting security-related matters: increased by 10 times (pre- and post-campaign launch). This is continuing to steadily increase with the first 3 months of 2024 already surpassing 2 entire years pre-campaign.鈥
Pre- and post-campaign comparison (particularly in the last 12 months of the learning campaign) saw a noticeable improvement in the quality of security-related reporting. Reporting was seen as being more insightful and gave Customs a better understanding of what their people were experiencing. Time between an incident occurring and the reporting was also noticeably shorter 鈥 people were reporting faster.鈥
Customs wanted to get people talking in their teams as part of evidence of a security culture. This was done by designing a team briefing pack, launched as part of the campaign (Kirkpatrick-based monitoring driver) 鈥 team briefing sessions would drive the behaviour of peoples' continuing security awarensss.
Sign up with your email address to receive news and updates.
Like our vibe? Reach out and let us know what we can do to help your situation.
Say hello