How do you make data privacy and cyber security training actually stick?

[loominate]

Many organisations still rely on mandatory data privacy and cyber security training that staff rush through and quickly forget.

What approaches have you found genuinely improve engagement and long-term awareness — especially for non-technical teams?

We’ve been exploring short, animated storytelling as a way to make privacy and cyber training more memorable and effective, but I’d be interested to hear what’s worked (or not worked) for others.

 

[mburdett555]

Why not push a training resit every year going over it all again, and at the end of the course that enforces a quiz module with a minimum pass rate. Fail under the threshold and the full course requires a resit.

That's what various companies already do. It sticks. Whether the colleague actually puts their knowledge into practice is their own liability when something goes wrong then