Gamified Cybersecurity Awareness Training

The gamified cybersecurity awareness training is ESET's human risk management program, helping organizations strengthen their first line of defense against cyber threats: their people. Designed to support cybersecurity awareness and compliance objectives, the program helps employees recognize threats, make informed decisions, and reduce avoidable security risks. During my five years at ESET, I worked on a two-person team responsible for maintaining and evolving multiple offerings within the ECAT catalog, supporting a global program that serves more than 100,000 organizations worldwide. The reel below provides a brief look at the broader ECAT learner experience, featuring highlights from both the gamified and interactive cybersecurity awareness training offerings.

Audience

Employees across industries, roles, and technical skill levels worldwide. This offering was designed for global delivery and localized into 12 languages to support diverse learner populations.

Project Focus

Ongoing curriculum maintenance and enhancement, including annual content updates, modernization efforts, scenario revisions, visual refreshes, and alignment with evolving cybersecurity threats.

My Role

Project planning, SME collaboration, review cycle management, instructional design, content strategy, script and storyboard development, documentation updates, and curriculum enhancements across the full ECAT catalog.

Key Learning Features
  • Scenario-based decision making

  • Gamified learning experiences

  • Phishing simulations

  • Progress tracking

  • Guided learning pathways through core cybersecurity concepts

Notable Constraints
  • Evolving cybersecurity threats and annual compliance updates

  • Coordination with cybersecurity researchers and SMEs

  • Localization across 12 languages

  • Balancing technical accuracy with accessibility for non-technical audiences

Interactive Mini-Game

This mini-game demonstrates one of the guiding principles behind the course: learning becomes more memorable when decisions have consequences. Rather than relying on knowledge checks alone, learners apply cybersecurity concepts within a realistic scenario, receive immediate feedback, and experience the outcomes of their choices in a safe environment before encountering similar situations in the real world.