Cybersecurity as a game? When corporate training finally makes sense
The typical scenario is familiar: a presentation, a short test, the obligation fulfilled. Formally everything is fine, but in practice most of the information fades after a few days. Cybersecurity thus becomes an administrative task, not a natural part of everyday work.
Companies invest considerable resources in cybersecurity. Yet it is repeatedly confirmed that the biggest weakness remains the human factor. Not because employees are irresponsible or unwilling to cooperate, but because the way security is trained in companies often does not lead to real behavioral change.
The typical scenario is familiar: a presentation, a short test, the obligation fulfilled. Formally everything is fine, but in practice most of the information fades after a few days. Cybersecurity thus becomes an administrative task, not a natural part of everyday work.
Why traditional training fails
One of the main problems is passivity. People are used to "sitting through" information, not experiencing it. There is a lack of context, emotion, and the opportunity to try situations out in a safe environment. This is the crucial difference between mere informing and true learning.
It was precisely this difference that we focused on in the new episode of CZECH CYBER TV, where we talked about what modern education in the field of cybersecurity should look like in order to be effective and sustainable in the long term.
The human factor and the role of engagement
The discussion naturally revolved around the human factor—attention, motivation, and the ability to perceive risks in everyday work situations. Cyber threats today are not just a technical matter for the IT department. Phishing, social engineering, or working with sensitive data affect every employee regardless of position.
It turns out that if people are not actively involved in education, one cannot expect them to adopt new habits. That is why approaches based on simulations, scenarios, and game principles are appearing more and more often.
When learning becomes an experience
One concrete example of this approach is the Czech platform 4CyberCity, which builds corporate training on simulations of real situations. The goal is not to replace security teams or technical measures, but to help people understand the context and learn to respond correctly.
Instead of passively watching presentations, employees are put into model scenarios where they must make decisions and bear their consequences. It is precisely this experience that proves key for retention and behavior change.
An open debate about the product and the wider context
The episode's guests were Lenka Antonín Hořejšová from AKR1 s.r.o. and David Pirkl, co-founder and ethical hacker of the platform 4CyberCity. The debate was not about a specific product, but about the broader perspective on how cybersecurity education in companies should really function.
Among other things, it was also said that no tool will solve the problem on its own. But if companies can combine technology, a human approach, and meaningful scenarios, mandatory training can become a real benefit.
Cybersecurity is not a formality
Cybersecurity is not a one-off activity or a checkbox for an audit. It is a long-term process that relies primarily on people. And that is precisely why it makes sense to look for new ways to involve them.
You can find the entire episode Cybersecurity as a game? on CZECH CYBER TV YouTube and audio platforms.