In this episode, we dive into the world of cyber escape rooms, and “experiential learning”. Will we find out way out?
It’s long been a challenge for CISOs to deliver security training, and build security awareness programmes, that are effective, and engaging. It’s even harder to measure whether those security initiatives work.
Over the last few episodes we’ve discussed both the psychology, and human factors, around cybersecurity. But to finish the series, we will look at experiential learning, or learning by doing.
Our guest is Amy Stokes-Waters. She delivers exactly that, by running escape rooms for organisations who want to improve security awareness, but also want to move away from conventional, and often dull, training. She’s also written a paper on experiential learning in cybersecurity. Her company is called The Cyber Escape Room Co, and it tries to do exactly what it says on the tin.
She has also written a white paper on experiential learning, which is well worth a read too.
But are CISOs willing to invest in a tool that is rather unconventional? Why is teamwork so important? And above all, does this type of learning work?
Featured image by Gerd Altmann from Pixabay
