{"body":{"data":[{"__typename":"CourseRecord","slug":"test-page","title":"Test courses","text":"Testing a new course","image":{"url":"https://www.datocms-assets.com/64114/1680090243-dora-financesector.jpeg?fm=webp&h=800&w=2560","alt":"man sitting in front of computer screens showing stock market statistics","__typename":"FileField"},"_modelApiKey":"course","_publishedAt":"2025-03-05T16:48:26+01:00","contentText":""},{"__typename":"CourseRecord","slug":"security-and-privacy-by-design-spbd","title":"Security and Privacy by Design (SPbD)","text":"This course in Security and Privacy by Design (SPbD) by Tagore and Junglemap teaches teams how to keep their products secure at every step of the development process.","image":{"url":"https://www.datocms-assets.com/64114/1695890290-tagore_spbd1.jpg?fm=webp&h=800&w=2560","alt":"Mobile phone","__typename":"FileField"},"_modelApiKey":"course","_publishedAt":"2024-03-20T15:30:44+01:00","contentText":"

Protect your reputation, support your business strategy, save costs and ensure compliance at every step of the way.

\n\n

Secure Development, Secure development life cycle and Data protection by design and default are key controls in ISO27001 and GDPR Article 25. Junglemap's OWASP and SPBD training helps you establish a process and shows you actionable examples and tips to help you jump-start your secure development program.

\n\n

Our course in Security and Privacy by Design (SPbD – SSDLC/DevSecOps) teaches teams how to keep their products secure at every step of the development process — from training, through deployment to maintenance and operations.

\n\n

Incorporating security and privacy at each step in the development process enables development teams to adopt a \"shift left\" approach, to manage application security risks early. Improving efficiency, while supporting business goals and maintaining compliance.

\n\n

All with easily digestible 5-minute NanoLearning lessons.

\n\n

A powerful combination

\n\n

Security and Privacy by Design gives your team a framework for how to focus on security and privacy in each step of the development process.

\n\n

Our OWASP Top 10 course covers the most critical application security risks today.

\n\n

In combination, these courses will give your team knowledge, a process, tools and examples to handle application security risks and balance these against the other priorities of the team.

\n\n

All while ensuring a measurable and continuous improvement process surrounding Security and Privacy, facilitating risk assessments and preparing for incident handling.

\n\n

Dynamic reports

\n\n

You need proof that your team completes lessons, passes knowledge tests and reflects on the content.

\n\n

Your statistics can be displayed at every level, from company-wide to department down to the individual — and you can export report sheets for presentation purposes.

\n"},{"__typename":"CourseRecord","slug":"worklife-environment-for-managers","title":"Course in Work Life Environment for Managers","text":"This introductory course provides a deeper understanding of the fundamentals in work life environment based on Swedish legislation.","image":{"url":"https://www.datocms-assets.com/64114/1710406527-work-life.png?fm=webp&h=800&w=2560","alt":"Work Life Environment for Managers","__typename":"FileField"},"_modelApiKey":"course","_publishedAt":"2024-03-14T09:56:57+01:00","contentText":"

The course focuses on how managers should handle issues related to the work life environment. It serves as a framework with lessons where responsibility and the importance of communication are key components. It functions both as an introduction and can be beneficial as a review.

\n\n

Topics include:

\n\n

Responsibilities and roles
Unhealthy workloads
What is stress?
Working hours, availability
Organizational work environment
Harassment and discrimination
Diversity and inclusion
Social work environment
Systematic work environment management

\n"},{"__typename":"CourseRecord","slug":"gdpr-for-managers","title":"Privacy & GDPR Course for managers","text":"Our Privacy & GDPR awareness training courses consist of 16 different NanoLearning lessons, including tests and evaluations, awareness surveys and management training. ","image":{"url":"https://www.datocms-assets.com/64114/1648800849-junglemap_information_security_awareness_for_all_employees_2022.jpg?fm=webp&h=800&w=2560","alt":"Image of black and blue computer keyboard ","__typename":"FileField"},"_modelApiKey":"course","_publishedAt":"2024-03-11T14:50:55+01:00","contentText":"

More than five years after the introduction of GDPR, many organisations still struggle with being GDPR-compliant. And here managers play a key role: A good culture of integrity and compliance with the rules presupposes that decision-makers have knowledge, awareness, and commitment. We offer courses for top executives and boards as well as executives at all levels.

\n\n

The content is developed to promote:

\n"},{"__typename":"CourseRecord","slug":"anti-money-laundering-aml","title":"Course in Anti-Money Laundering (AML)","text":"This NanoLearning introduction course aims to provide employees with knowledge about what money laundering and terrorism financing are and how they can be prevented.","image":{"url":"https://www.datocms-assets.com/64114/1648800644-junglemap_anti_money_laundering_course.jpg?fm=webp&h=800&w=2560","alt":"Detailed image of money","__typename":"FileField"},"_modelApiKey":"course","_publishedAt":"2024-03-11T14:49:04+01:00","contentText":"

Our NanoLearning method enables you to efficiently raise awareness on your Anti-Money Laundering(AML)-policy – over time.

\n\n

The standard content is customisable for your organisation. We also provide an effect measurement report on increased AML-awareness in your organisation.

\n\n

The content in this Anti-Money Laundering course is developed to promote organisational policies and case-based reflection on individual responsibilities.

\n\n

The fight against money laundering and terrorism financing is a high priority both nationally and internationally. Non-compliance can lead to fines and damage to reputation/credibility. To reduce the risk of money laundering incidents in your organisation, regular reminders are necessary.

\n\n

Topics include:

\n\n

What is money laundering?
Why combat money laundering?
Know your customer
Red flags
Monitoring
Reporting suspicions

\n"},{"__typename":"CourseRecord","slug":"dora","title":"Introduction course to the DORA Regulation","text":"With this DORA introduction your management will get a better understanding of what your organisation needs to have in place to be DORA compliant.","image":{"url":"https://www.datocms-assets.com/64114/1680090243-dora-financesector.jpeg?fm=webp&h=800&w=2560","alt":"man sitting in front of computer screens showing stock market statistics","__typename":"FileField"},"_modelApiKey":"course","_publishedAt":"2024-03-11T14:45:59+01:00","contentText":"

DORA, which stands for the Digital Operational Resilience Act, is a set of rules that affects the financial sector and tech companies that deliver to the sector. It is a great opportunity for the industry to improve across several components of operational resilience.

\n\n

Its purpose is to bring together different ways of handling technology issues and make sure that Europe's financial sector can handle and reduce the consequences of information security incidents.

\n\n

Affected entities and their tech services will have to follow DORA regulations by January 17, 2025.

\n\n

This NanoLearning course introduces your Board Members and Executives to the basics of DORA compliance.

\n\n

Topics include:

\n\n

NIS2 directive vs. DORA regulation
The scope and objective of DORA
DORA: Governance
DORA: Risk management
DORA: Incident reporting
DORA: Digital operational resilience testing
DORA: Third-party risk management
DORA: Sharing information

\n"},{"__typename":"CourseRecord","slug":"anti-bribery-and-corruption-abc","title":"Course in Anti-Bribery and Corruption (ABC)","text":"This introductory course uses the NanoLearning method to provide employees with a better understanding of bribery and corruption and how to prevent it.","image":{"url":"https://www.datocms-assets.com/64114/1648800640-junglemap_anti_bribery_and_corruption_course.jpg?fm=webp&h=800&w=2560","alt":"Image of a man with a suit and expensive watch","__typename":"FileField"},"_modelApiKey":"course","_publishedAt":"2024-03-11T14:45:19+01:00","contentText":"

Our NanoLearning method enables you to efficiently raise awareness on your Anti-Bribery and Corruption(ABC)-policy – over time.

The standard content is customisable for your organisation. We measure the effect on the ABC-awareness in your organisation before and after the course.

The content in this Anti Bribery and Corruption course is developed to promote organisational policies and case-based reflection on individual responsibilities.

The fight against anti-bribery and corruption is a top priority both nationally and internationally. Non-compliance can lead to fines and damage to reputation/credibility. To reduce the risk of bribery and corruption-related incidents, regular reminders are necessary.

Topics include:

Combating corruption
Gifts and benefits
Conflicts of interest
Violations

\n"},{"__typename":"CourseRecord","slug":"information-security-for-managers","title":"Information Security Awareness Course for Managers","text":"Because of the increase in online threats, managers knowledge and awareness of information security are more important than ever. ","image":{"url":"https://www.datocms-assets.com/64114/1648800845-junglemap_information_security_awareness_for_all-employees_2022_2.jpg?fm=webp&h=800&w=2560","alt":"Image of woman working with laptop in her lap","__typename":"FileField"},"_modelApiKey":"course","_publishedAt":"2024-03-11T14:44:51+01:00","contentText":"

Building human firewalls is all about raising awareness - all year round. In this Information Security awareness course, managers will get a better understanding of their key role in promoting a cybersecurity culture combining knowledge with alertness, dialog and practice, thus reducing the risk of information security incidents in your organization. This NanoLearning course is aimed specifically at managers and leaders.

\n\n

The content is designed to promote a better understanding of the organization's work with information security and the manager's role and responsibilities.

\n\n

The course covers topics such as:

\n"},{"__typename":"CourseRecord","slug":"nis2-introduction","title":"Introduction course to the NIS2 Directive","text":"With this NIS2 introduction your management will get a better understanding of what your organisation needs to have in place to be NIS2 compliant. ","image":{"url":"https://www.datocms-assets.com/64114/1700047034-nis2-course-image-europe-609118_960_720.jpeg?fm=webp&h=800&w=2560","alt":"EU-flag","__typename":"FileField"},"_modelApiKey":"course","_publishedAt":"2024-03-11T14:21:03+01:00","contentText":"

With a wider coverage of sectors, stricter requirements, incident reporting and more hard-hitting penalties for non-compliance, the new NIS2 Directive is the most comprehensive European cybersecurity directive yet, and represents a significant step forward.

\n\n

Entites in sectors defined as essential or important according to the NIS2 Directive can no longer avoid having a systematic approach to cybersecurity.

\n\n

Give your board and executives a chance to leverage on what’s expected and what needs to be done and prepared to make your organisation NIS2 compliant before October 2024, when the NIS2 Directive is implemented.

\n\n

This NanoLearning course introduces your Board Members and Executives to the following topics:

\n\n

Topics include:

\n\n

● Introduction to the NIS2 Directive

\n\n

● About the NIS2 Directive

\n\n

● The evolution: NIS to NIS2

\n\n

● Scope and entities affected by NIS2

\n\n

● Requirements and measures under NIS2

\n\n

● Preparing for NIS2 compliance

\n\n

● Fines and penalties under NIS2

\n"},{"__typename":"CourseRecord","slug":"sustainability-agenda-2030","title":"Course on Sustainability Agenda 2030","text":"This introductory NanoLearning course aims to provide employees with a deeper understanding of Agenda 2030 and the UNs' 17 Sustainability Development Goals.","image":{"url":"https://www.datocms-assets.com/64114/1663743764-electricity-sun-wind-forces-of-nature.jpeg?fm=webp&h=800&w=2560","alt":"Windmills and solar panels in an open field","__typename":"FileField"},"_modelApiKey":"course","_publishedAt":"2024-03-11T14:12:03+01:00","contentText":"

The course promotes a comprehensive understanding of what the Sustainability Agenda 2030 entails. Lessons describe each goal, outlining actions your organisation and you as an individual can take. The course is designed for municipal employees but can be tailored to your organisation.

Topics include:

Goal 1 – No Poverty
Goal 4 – Quality Education
Goal 5 – Gender Equality
Goal 6 – Clean Water and Sanitation
Goal 7 – Affordable and Clean Energy
Goal 10 – Reduced Inequality
Goal 13 – Climate Action

Junglemap also offers an introduction to sustainable development: Link.

\n"},{"__typename":"CourseRecord","slug":"code-of-conduct-and-business-ethics","title":"Course in code of Conduct and Business Ethics","text":"Our NanoLearning course in code of conduct/business ethics is designed to provide employees with a deeper understanding of your Code of conduct and the ethical principles that govern your work and decision making.","image":{"url":"https://www.datocms-assets.com/64114/1648800976-junglemap_pre-boarding-and-onboarding_course.jpg?fm=webp&h=800&w=2560","alt":"Image of two women working at the office","__typename":"FileField"},"_modelApiKey":"course","_publishedAt":"2024-03-11T14:07:49+01:00","contentText":"

Our NanoLearning method raises awareness regarding business principles and ethical and environmental guidelines over time, reducing the risk of non-compliance.

\n\n

The standard content is customisable for your organisation. We also provide an effect measurement report on increased Code of Conduct-awareness in your organisation.

All companies are unique with their own challenges, framework conditions and focus areas and employees must be familiar with and comply with guidelines, best practices, regulations, and internal procedures.

\n\n

With NanoLearning you can inform without information overflow. Youcan easily tailor the program with emphasis on your company's own challenges.

\n\n

The course explores the values that shape corporate culture, ethical dilemmas, and maintaining integrity and professionalism in all aspects. The aim of the course is to strengthen an ethical approach, both internally and externally, to ensure a responsible and respectful work environment for everyone.

\n\n

Topics include:

\n\n

Corruption
Gifts and invitations
Confidentiality
Conflicts of interest
Bullying and harassment
Supply chain
Reporting irregularities
Compliance with ethical guidelines

\n\n

The training can be sent to all employees and to new employees throughout the year, in the rhythm that suits you. It can be updated, expanded and reused year after year.

\n"},{"__typename":"CourseRecord","slug":"sustainability-introduction-course","title":"Sustainability Introduction Course","text":"This NanoLearning course aims to provide employees with a better understanding of what sustainable development is and why it is important.","image":{"url":"https://www.datocms-assets.com/64114/1663742368-sustainability-intro.jpeg?fm=webp&h=800&w=2560","alt":"Windmills in an open field in sunset","__typename":"FileField"},"_modelApiKey":"course","_publishedAt":"2024-03-11T14:06:59+01:00","contentText":"

The course promotes a deeper understanding of what sustainability means for a business, the development of ongoing focus areas, and the opportunity to apply sustainability regulations in the operation.

\n\n

Topics include:

\n\n

What is sustainable development
Agenda 2030/ Paris Agreement
What is the greenhouse effect
What is net-zero emissions
Circular economy

\n\n

\n"},{"__typename":"CourseRecord","slug":"gdpr-for-employees","title":"Privacy & GDPR Course for all employees ","text":"Our Privacy & GDPR awareness training courses consist of 8 different NanoLearning lessons, covers all the rights and principles of GDPR including evaluations and awareness surveys.","image":{"url":"https://www.datocms-assets.com/64114/1648800759-junglemap_gdpr_and_privacy_for_all_employees_course.jpg?fm=webp&h=800&w=2560","alt":"Detailed image of an eye with the color blue","__typename":"FileField"},"_modelApiKey":"course","_publishedAt":"2024-03-11T13:53:48+01:00","contentText":"

More than five years after the introduction of GDPR, many organisations still struggle with being GDPR-compliant.

\n\n

In this Privacy/GDPR awareness course your employees will learn about established rules, principles and best practices regarding privacy and personal data protection, thus reducing the risk of GDPR breaches in your organization.

\n\n

Our NanoLearning method enables you to efficiently raise awareness on privacy/GDPR - over time.

\n\n

We provide an effect measurement report on privacy/GDPR awareness in your organization.

\n\n

The content raises awareness on privacy/GDPR, increasing your employees’ knowledge of personal data protection and how to reduce risk of GDPR breaches by showing how privacy matters in both their professional and private lives.

\n\n

In addition, we offer privacy training and surveys for executives and managers.

\n\n

Examples of content:

\n"},{"__typename":"CourseRecord","slug":"information-security-for-employees","title":"Information Security Awareness Course for all employees ","text":"Our information security awareness training consists of 3-minute lessons on topics like phishing, ransomware, multi-factor authentication, social media, insider risks and the implication of AI.","image":{"url":"https://www.datocms-assets.com/64114/1648800887-junglemap_information-security-awareness-for-managers.jpg?fm=webp&h=800&w=2560","alt":"Image of information security and awareness course for managers","__typename":"FileField"},"_modelApiKey":"course","_publishedAt":"2024-03-11T13:50:12+01:00","contentText":"

Building human firewalls is all about raising awareness - all year round. In this course, your employees will learn about digital threats and how to prevent them by combining knowledge with alertness, dialog, and practice, thus reducing the risk of information security incidents in your organisation.

\n\n

Our NanoLearning method enables you to efficiently raise awareness on information security - over time.

\n\n

We also provide effect measurement reports on the Information Security awareness in your organisation.

\n\n

The content raises awareness on information security, increasing your employees’ knowledge of various information security threats and how to reduce risk by following STAR behaviour (Stop, Think, Ask, React).

\n\n

Examples of content:

\n"},{"__typename":"CourseRecord","slug":"onboarding","title":"Preboarding and Onboarding","text":"Our NanoLearning method provides a unique solution for introducing the new employee to the company before their first day at work as well as the ever so important first few weeks on the new job. ","image":{"url":"https://www.datocms-assets.com/64114/1648801022-junglemap_work-environment_course.jpg?fm=webp&h=800&w=2560","alt":"Image of a woman and a man laughing at the office","__typename":"FileField"},"_modelApiKey":"course","_publishedAt":"2024-03-07T14:29:56+01:00","contentText":"

A good pre- and onboarding process can play a huge difference in talent management for any organisation. Our NanoLearning method is a perfect fit to introduce new employees to business ethics, principles and guidelines. With our efficient pre- and onboarding method your new employees will seamlessly be integrated into your organisation.

The method introduces new staff in two steps:

In preboarding, the focus is to build the employer brand and to give the new employee a good and clear impression of the organisation.

In onboarding, the focus is to give the employee the opportunity to adopt the rules and policies that the organisation stands for.

The content is customisable for your organisation and you also get an effect measurement report of what the employees actually felt about the introduction after it is finished.

Effects

\n"},{"__typename":"CourseRecord","slug":"work-environment","title":"Work environment course for managers","text":"This introductory course on work environment provides managers with a better understanding of the basics of health and safety and is based on Swedish legislation.","image":{"url":"https://www.datocms-assets.com/64114/1648800947-junglemap_code-of-conduct_course.jpg?fm=webp&h=800&w=2560","alt":"Image of empty conference room ","__typename":"FileField"},"_modelApiKey":"course","_publishedAt":"2024-03-01T15:43:45+01:00","contentText":"

The course deals with how managers should deal with health and safety issues. The course is a framework of lessons where responsibility and the importance of communication are the main elements. It serves both as an introduction and can also be used as a refresher.

\n\n

Topics include:

\n\n

Responsibilities and roles
Unhealthy workload
What is stress?
Working hours, availability
Organisational work environment
Victimisation
Diversity and inclusion
Social work environment
Systematic work environment management

\n\n

\n"},{"__typename":"CourseRecord","slug":"course-in-security-culture","title":"Course in Security Culture","text":"This introductory course on security culture aims to explore the importance of creating and maintaining a strong security culture, understanding and applying relevant security laws.","image":{"url":"https://www.datocms-assets.com/64114/1708424414-bernard-hermant-gadcaezhwg-unsplash.jpg?fm=webp&h=800&w=2560","alt":"sakerhetskultur","__typename":"FileField"},"_modelApiKey":"course","_publishedAt":"2024-03-01T15:35:55+01:00","contentText":"

This course focuses on reinforcing security awareness and creating a work culture where every individual feels a responsibility for safety and compliance. The course is designed for all employees, regardless of position or department.

\n\n

Topics include:

\n\n

Risk areas
Security culture and climate
General legislation
Violence and threats
Fire theory
Fire protection and preventive work
Customisable lessons: Perimeter protection/alarms and access control

\n"},{"__typename":"CourseRecord","slug":"cyber-security-for-product-and-development-teams","title":"Cyber security for product and development teams ","text":"This role-based course by Tagore and Junglemap, empowers product and development teams with up-to-date knowledge about the most critical security risks to web applications.","image":{"url":"https://www.datocms-assets.com/64114/1678362291-owasp-header1.jpeg?fm=webp&h=800&w=2560","alt":"Computer screen with security icon","__typename":"FileField"},"_modelApiKey":"course","_publishedAt":"2024-02-28T18:20:00+01:00","contentText":"

Cybercriminals and attacks are getting more advanced.

\n\n

Today, product and development teams need to understand threats and risks to their web applications, by looking at their application from the same perspective as cyber criminals.

\n\n

Secure Coding and Security awareness training are key security controls in ISO27001 and GDPR Article 25. Jump-start your security program and give your team a common base of knowledge of security risks with Junglemap's training on OWASP Top 10 and SPbD.

\n\n

Developed by experts with decades of experience in information security, this course empowers developing teams by giving a greater foundation to understand risks and protect your web apps.

\n\n

Via short bit-sized lessons, directly distributed via e-mail, recipients gain valuable insight into the most effective ways of countering the most common threats. Learn more about the NanoLearning method here.

\n\n

In this course, we cover the OWASP Top 10 Web Application Security Risks.

\n\n

The topics covered are:

\n\n

1. Broken Access Control

\n\n

2. Cryptographic Failures

\n\n

3. Injection

\n\n

4. Insecure Design

\n\n

5. Security Misconfiguration

\n\n

6. Vulnerable and Outdated Components

\n\n

7. Identification and Authentication Failures

\n\n

8. Software and Data Integrity Failures

\n\n

9. Security Logging and Monitoring Failures

\n\n

10. Server-Side Request Forgery

\n\n

Dynamic reports
Ultimately, you need proof that your employees complete lessons, pass knowledge tests and so on.

\n\n

Your statistics can be displayed at every level, from company-wide to department down to the individual, and you can export report sheets for presentation purposes.

\n\n

And of course, Junglemap's dedicated CSM team are happy to help you with advance information, course distribution, reminders, reports and more to make the most of the course.

\n\n

Security and Privacy by Design (SPbD)
By combining this course with our new course on SPbD your development teams will also get a useful framework on how to incorporate security and privacy at every step in the development process.

\n\n

\n"},{"__typename":"InsightRecord","slug":"goran-govorcinovic-new-vp-sales-junglemap-sweden-finland-and-benelux","title":"Goran Govorcinovic new VP Sales Junglemap Sweden, Finland and Benelux","image":{"url":"https://www.datocms-assets.com/64114/1696328493-goran_govornicovic_portrait.jpeg?fm=webp","alt":"Goran Govornicovic","__typename":"FileField"},"text":"","_modelApiKey":"insight","_publishedAt":"2024-02-28T08:56:16+01:00","contentText":"

Tell us more about your new role!

\n\n

This is a way for us to have a more coherent approach to the whole commercial operations in the Benelux, Swedish and Finnish markets. Both in terms of new sales, upsell and renewals of our services and products. This is crucial for us as a SaaS company.

\n\n

What is most important right now for Junglemap as a company?

\n\n

We know that the groundbreaking NanoLearning is a proven method. Over 7 million users since 2006 speaks for itself. Now we're fine-tuning our processes to systematise cyber security awareness training in organisations. With the help of our new AI feature, our customers save a lot of time and resources.

\n\n

Tell us about the expanded offering around GRC

\n\n

GRC (Governance, Risk and Compliance) is an area where we see a huge potential and where we have extensive experience in helping clients with tailored training in everything from sustainability to anti-corruption and work environment. Our new AI Converter now makes it much easier and more efficient for our customers to create the courses they need to increase their compliance. In this way, we combine NanoLearning with a simpler and more efficient way to create, distribute and measure effects via our SaaS platform.

\n"},{"__typename":"InsightRecord","slug":"over-300-new-customers-and-a-30-increase-in-new-deals","title":"Over 300 new customers and a 30% increase in new deals.","image":{"url":"https://www.datocms-assets.com/64114/1702991790-gustav_berghog_dec2023-jpg.heic?fm=webp","alt":null,"__typename":"FileField"},"text":"

With over 300 new customers and a 30% increase in the number of new deals, Junglemap can look back at a very strong 2023.

\n","_modelApiKey":"insight","_publishedAt":"2024-01-17T09:14:38+01:00","contentText":"

One of the key drivers for the staggering increase in new deals is the groundbreaking AI converter introduced last year. – Many of our existing clients have longed to expand their use of NanoLearning into other areas, says Gustav Berghog, Group CEO Junglemap. With our new AI feature this is now much easier to do, and awareness raising in GRC-related topics now complements our cybersecurity core.

\n\n

A closer look at the performance in 2023 shows a doubled number of new deals with existing Junglemap customers. This significant increase is related to many customers wanting to expand their use of NanoLearning with Junglemaps AI Converter that was introduced during 2023.

\n\n

– Creating good quality learning content used to be a time-consuming effort that many organisations haven’t been able to prioritise, says Gustav Berghog.

\n\n

With Junglemaps’ new AI Converter organisations can, in practically no time, create, distribute, and follow up NanoLearning courses on their policies on Sustainability, Anti Bribery and Corruption, Anti-Money Laundering and different Code of Conduct-related policies.

\n\n

– Awareness training in these areas has always been a part of what we offer at Junglemap, but with the new AI Converter in place, GRC-related topics are now complementing our cybersecurity core in a much more significant way.

\n\n

Entering 2024, when the number of cyberattacks are predicted to continue to increase in unparallel numbers, many organisations seek to improve their cybersecurity awareness training. The new European NIS2 directive that will be put into action in August 2024 is also a clear incentive for management to pay more attention to their organisational cyber hygiene.

\n\n

– We see that many organisations finally are leaving the ‘once-a-year' approach when it comes to cyber security training, to look for ways to secure their human firewalls all –year round, says Gustav Berghog. And that is exactly what Junglemaps’ method is designed to do.

\n"},{"__typename":"InsightRecord","slug":"our-users-love-us","title":"Our users love us – they really do! ","image":{"url":"https://www.datocms-assets.com/64114/1702991790-gustav_berghog_dec2023-jpg.heic?fm=webp","alt":null,"__typename":"FileField"},"text":"

The foundation for a successful company and continuing growth all comes down to one thing: happy customers! This goes for any kind of industry, but maybe even more so for a SaaS company like Junglemap. Having customers renewing their subscriptions and adding more services along the way is exactly the kind of journey we’re aiming for.

\n","_modelApiKey":"insight","_publishedAt":"2023-12-19T14:30:27+01:00","contentText":"

Receiving the G2 High Performer certificate for Winter 2024 is a solid proof that our customers really appreciate what we offer. At the same time, getting customer reviews based on real user experience, also offers some insights in what we need to focus on going forward.

\n\n

When analyzing our ratings, it’s always interesting to put them into perspective to what we promise to deliver in the first place. At Junglemap we pride ourselves to be ‘reliable and always keep our promises’.

\n\n

First of all, we always promise a measurable result. Not necessarily a positive result or an easy success story, but a clear and transparent result that the organization can build their future activities upon. We always want to combat the FoFo – Fear of Finding out – that many organisations suffer from. It’s always better to know, than not to.

\n\n

In line with that, it makes me very happy to see that we have high ratings and above industry average when it comes to key features like baselining, continuous assessment, and reporting.

\n\n

Keeping track of awareness progress is key in building human firewalls!

\n\n

Secondly, we need to keep awareness training easy. Therefore it’s also reassuring to see that we have great scores when it comes to ease of set up and ease of use. Many organizations need to kick start their awareness training and apart from the 3-minute NanoLearning format, easiness for end-users is also one of the success factors behind our impressive 98 percent completion rates.

\n\n

But good customer reviews don’t make us ‘fat and happy’, it makes us want to reach even further. Looking ahead we’re going to continue the work with improving our admin interface, our dynamic reporting, our phishing simulation features and making our customers making even more use of our groundbreaking AI NanoLearning Converter.

\n\n

Any organization going in to the ‘NIS2 driven’ 2024 looking for a partner to strengthen their human firewalls should really look into what we from Junglemap can offer.

\n\n

Or just ask our existing customers – because the really love us!

\n\n

\n"},{"__typename":"InsightRecord","slug":"privacy-by-design-can-create-safer-schools","title":"Privacy by design can create safer schools ","image":null,"text":"

We all want a safe and secure digital environment in our schools. At the same time, parents want a smooth digital operation with easy access to information. How can we find a balance between ease of use and high privacy standards? How can we create a privacy by design perspective in digital innovation?

\n","_modelApiKey":"insight","_publishedAt":"2023-11-17T11:07:09+01:00","contentText":"

This was the topics for a Junglemap webinar with panelists Wanda Hoogerbrugge, privacy advisor at Privacy op School B.V, Christian Landgren, CEO at Stockholm based iTeam and Arno van den Hof, Country Manager Junglemap Benelux and Cybersecurity expert.

\n\n

Low privacy awareness

\n\n

The Dutch consultancy firm Privacy op School is now working towards 10 percent of the schools in the Netherlands with data from over half a million students. The main challenges that Wanda Hoogerbrugg meet as a privacy advisor is a low overall awareness, lack of understanding and a lack of resources. Many schools are under staffed, and teachers have an increasing work load to deal with as it is. Dealing with privacy issues tend to become ‘yet another thing to deal with’.

\n\n

Privacy (misconceptions) hampers innovation

\n\n

Christian Landgren shares lessons learned from the work with Öppna skolplattformen, where he together with other parents with school children built a digital platform in open source using the API from the city of Stockholm. This was mistaken for a data breach and led to an open conflict where the city of Stockholm ended up filing a police report.

\n\n

Today, three years later, both parties are on speaking terms again, and according to Christian Landgren, the whole incident was partly due to a misconception or misinterpretation of GDPR and privacy.

\n\n

He also acknowledges that there is a general privacy backlog due to the fact that internet and digitalization started off with no privacy concerns in mind, and that we often are still trying to catch up.

\n\n

But whenever privacy comes as a request late in the innovation process, it ‘always means no’ says Christian Landgren. This is why a privacy centered design is so much needed.

\n\n

Put the user in focus

\n\n

To Arno van den Hof, a privacy by design approach is not that hard to achieve. It’s all about putting the user in focus and always ask what the benefit of the new app or service is, and what privacy issues might be at stake.

\n\n

With that in mind the innovation should focus around what’s needed, rather than ‘what’s possible’. Christian Landgren often see that many organisations focus on being able to say that they are innovating, rather than thinking of the use of the innovation. ‘We call it innovation theatre’, he says. And we don’t participate in those kind of projects.

\n\n

Open source collaboration

\n\n

The panelists all agree that a privacy by design perspective is the only way forward. One way to go forward is by starting in small test-projects with limited potential harm if anything goes wrong, rather than trying to ‘solve everything’. But even small projects need to be divided between different collaborating partners if both innovation and privacy aspects are taken into account. From an innovation perspective Christian Landgren highlights open source as a good tool for cooperation.

\n"},{"__typename":"InsightRecord","slug":"digital-infrastructure-sector-what-s-new-with-nis2","title":"The Digital Infrastructure sector - what’s new with NIS2? ","image":{"url":"https://www.datocms-assets.com/64114/1699971417-nis2-smart-home-home-technology-multimedia.jpeg?fm=webp","alt":null,"__typename":"FileField"},"text":"

With a wider coverage of sectors, stricter requirements for risk management and incident reporting and more hard-hitting penalties for non-compliance, the new NIS2 directive is the most comprehensive European cybersecurity directive yet. As our dependence on digital technologies grow, data centers are becoming the backbone of society – and the whole Digital Infrastructure Sector followingly a high-value target for malicious actors.

\n","_modelApiKey":"insight","_publishedAt":"2024-03-28T07:59:44+01:00","contentText":"

The Digital infrastructure sector is facing several cybersecurity challenges. Some relating to technical operations, some to the people managing the systems. Ransomware Attacks is of course a major threat causing down time and difficulties to recover the systems. This sector also relies heavily on third-party vendors for various services, and this can lead to additional risks if those vendors lack adequate security measures. Supply chain security is key.

\n\n

Due to the shortage of cybersecurity professionals and the high cost of cybersecurity measures, creates significant barriers to securing digital infrastructure. Physical security systems, like cameras and access control, is necessary for protecting digital infrastructure from complex physical attacks. At the same time the number of Internet of Things (IoT) devices used by operators and the vast amounts of data they generate increase the attack surface.

\n\n

The digital infrastructure sector, will be heavily impacted by the NIS2 directive, affecting every operational aspect. Demanding upgrades to physical security measures and better incident response and recovery planning. Operators in the digital infrastructure sector may experience increased regulatory oversight, as EU supervisory authorities take steps to enforce the requirements of the NIS2 directive and hold companies accountable for protecting their critical systems and networks.

\n\n

Awareness training – one of 10 key cyberhygiene measures

\n\n

The NIS2 directive requires that the Digital Infrastructure sector and other essential and important entities implement 10 baseline security measures to address specific forms of likely cyberthreats.

\n\n

- Risk assessments and security policies for information systems.

\n\n

- Policies and procedures for evaluating the effectiveness of security measures.

\n\n

- Policies and procedures for the use of cryptography.

\n\n

- A plan for handling security incidents.

\n\n

- Security around the procurement of systems and the development and operation of systems.

\n\n

- Security procedures for employees with access to sensitive or important data.

\n\n

- A plan for managing business operations during and after a security incident.

\n\n

- The use of multi-factor authentication.

\n\n

- Security around supply chains and the relationship between the company and direct supplier.

\n\n

- Cybersecurity training and a practice for basic computer hygiene.

\n\n

Cybersecurity training is not only ‘on the list’. It’s a well-known fact that awareness training is an essential part in creating the organisational security culture needed for organisations to be compliant with many of the other security measures mandated by NIS2. Without awareness training all year round, many of the operational procedures will eventually fail – due to human errors.

\n\n

Our new updated 2024 editions of Information Security Awareness training is targeting all employees, managers, executives, and boards and is one part of being NIS2 compliant.

\n\n

Or why not kickstart with our NIS2 Introdution course? This will give your management a better understanding of what your organisation need to be NIS2 compliant.

\n\n

\n"},{"__typename":"InsightRecord","slug":"the-public-sector-what-s-new-with-nis2","title":"The Public sector - what’s new with NIS2? ","image":{"url":"https://www.datocms-assets.com/64114/1699969069-nis2-social_dataintrang_16x9.jpeg?fm=webp","alt":null,"__typename":"FileField"},"text":"

With a wider coverage of sectors, stricter requirements for risk management and incident reporting and more hard-hitting penalties for non-compliance, the new NIS2 directive is the most comprehensive European cybersecurity directive yet. The NIS2 Directive defines the public administration sector as an “essential entity,” emphasizing the importance of safeguarding the sector against cyber threats.

\n","_modelApiKey":"insight","_publishedAt":"2023-12-14T08:46:53+01:00","contentText":"

The Public administration sector is facing different types of challenges where many are a combination with an overall low lack of awareness, limited resources, and large complex ICT-systems. Three attack vectors stand out: Ransomware, Phishing and State sponsored attacks need to be high on the public cybersecurity agenda. Being a sector where employees are rarely educated on cyber threats, makes the Public administration sector specifically vulnerable to cyberattacks.

\n\n

The NIS2 will have broad implications for the public administration sector, as security breaches in this sector could jeopardize sensitive citizen information and disrupt essential public services, creating destabilization on a local and national level. According to the NIS2 directive, the Public Administration sector need to implement enhanced security measures to protect sensitive information, such as personal data of citizens, financial information, and critical infrastructure data from cyberattacks.

\n\n

Along with this comes the demand for continual risk assessments. The purpose of this is to ensure that organizations have the capacity to identify areas where improvement is needed, to ensure that essential services provided are available and functioning even in the event of a cyber incident.

\n\n

To comply with the upcoming NIS2 requirements, organizations in the public administration sector must invest in employee cybersecurity training. This is especially important given the varying degrees of cyber awareness levels among employees in this sector, which represents a significant security risk in itself. The new focus on employee education and regulatory compliance is set to strengthen the sector’s defenses, while the requirement for regular risk assessments and incident response planning can help ensure that the sector remains vigilant.

\n\n

Awareness training – one of 10 key cyberhygiene measures

\n\n

The NIS2 directive requires that the Public Administration sector and other essential and important entities implement 10 baseline security measures to address specific forms of likely cyberthreats.

\n\n

- Risk assessments and security policies for information systems.

\n\n

- Policies and procedures for evaluating the effectiveness of security measures.

\n\n

- Policies and procedures for the use of cryptography.

\n\n

- A plan for handling security incidents.

\n\n

- Security around the procurement of systems and the development and operation of systems.

\n\n

- Security procedures for employees with access to sensitive or important data.

\n\n

- A plan for managing business operations during and after a security incident.

\n\n

- The use of multi-factor authentication.

\n\n

- Security around supply chains and the relationship between the company and direct supplier.

\n\n

- Cybersecurity training and a practice for basic computer hygiene.

\n\n

Our new updated 2024 editions of Information Security Awareness training is targeting all employees, managers, executives, and boards and is one part of being NIS2 compliant.

\n\n

Or why not kickstart with our NIS2 Introdution course? This will give your management a better understanding of what your organisation need to be NIS2 compliant.

\n"},{"__typename":"InsightRecord","slug":"the-water-supply-sector-what-s-new-with-nis2","title":"The Water Supply sector - what’s new with NIS2? ","image":{"url":"https://www.datocms-assets.com/64114/1699602367-nis2-faucet-water-supply-fountain-water.jpeg?fm=webp","alt":"water fountain","__typename":"FileField"},"text":"

With a wider coverage of sectors, stricter requirements for risk management and incident reporting and more hard-hitting penalties for non-compliance, the new NIS2 directive is the most comprehensive European cybersecurity directive yet. The Water Supply sector is considered an essential sector under the coming NIS2 directive because a disruption to this service could have severe real-life consequences in society.

\n","_modelApiKey":"insight","_publishedAt":"2024-03-28T08:00:18+01:00","contentText":"

The water supply sector is a vital industry responsibile for providing communites with clean and safe water while also managing and treating wastewater. The sector is facing a wide range of cybersecurity challenges. Hidden vulnerabilities due to the simple fact that many water treatment and distribution systems were designed long before cybersecurity was a concern. Due to its nature, most water treatment and distribution facilities are located in remote or unsecure areas, making them vulnerable to physical attacks that can disrupt systems.

\n\n

Today, many water and wastewater utilities lack of resources to invest in talented cybersecurity personnel or maintain an effective security posture. Like all industries there’s always a risk of insider threats as well as third-party risks, since many providers in this sector often use third-party vendors, creating potential entry points for attackers. Control systems manage critical technical processes in the water treatment and distribution process. Often connected to the internet, these systems are susceptible to attacks.

\n\n

Sector specific challenges

\n\n

The water supply sector will likely be severely affected by the NIS2 Directive. Water utilities may need to invest heavily in cybersecurity measures to ensure that they remain resilient to cyber threats, with an increase in their budget allocation for cybersecurity measures. This includes upgrading technology, procuring new security tools, and providing employee training programs. This could in turn, stimulate the demand for cybersecurity services, promote competition, innovation, and water utilities may need to adjust their procurement practices to comply with the NIS2 cybersecurity requirements. Across sectors, the NIS2 directive emphasizes coordination between different sectors and water utilities must work with other sectors to develop and implement coherent cybersecurity strategies.

\n\n

Awareness training – one of 10 key cyberhygiene measures

\n\n

The NIS2 directive requires that the water supply sector and other essential and important entities implement 10 baseline security measures to address specific forms of likely cyberthreats.

\n\n

- Risk assessments and security policies for information systems.

\n\n

- Policies and procedures for evaluating the effectiveness of security measures.

\n\n

- Policies and procedures for the use of cryptography.

\n\n

- A plan for handling security incidents.

\n\n

- Security around the procurement of systems and the development and operation of systems.

\n\n

- Security procedures for employees with access to sensitive or important data.

\n\n

- A plan for managing business operations during and after a security incident.

\n\n

- The use of multi-factor authentication.

\n\n

- Security around supply chains and the relationship between the company and direct supplier.

\n\n

- Cybersecurity training and a practice for basic computer hygiene.

\n\n

Our new updated 2024 editions of Information Security Awareness training is targeting all employees, managers, executives and boards and is one part of being NIS2 compliant.

\n\n

Or why not kickstart with our NIS2 Introdution course? This will give your management a better understanding of what your organisation need to be NIS2 compliant.

\n"},{"__typename":"InsightRecord","slug":"the-transport-sector-what-s-new-with-nis2","title":"The transport sector - what’s new with NIS2? ","image":{"url":"https://www.datocms-assets.com/64114/1699525284-nis2-action-asphalt-auto-automobile.jpeg?fm=webp","alt":null,"__typename":"FileField"},"text":"

With a wider coverage of sectors, stricter requirements for risk management and incident reporting and more hard-hitting penalties for non-compliance, the new NIS2 directive is the most comprehensive European cybersecurity directive yet. The transport sector is considered an essential sector under the coming NIS2 directive because any major interruption in it could cause destructive ripple effects throughout society.

\n","_modelApiKey":"insight","_publishedAt":"2024-03-28T08:01:38+01:00","contentText":"

Covering everything from urban public transportation systems to rural roads and inter-regional air travel, the transport sector is one of the cornerstones of modern society and the economy.

\n\n

Europe’s transport sector is responsible for delivering the infrastructure and services that bring people and businesses together. The transport sector as a key component to the European economy is also acknowledged by threat actors. The sector is facing a wide range of cybersecurity challenges, such as ransomware attacks leading to a tangible supply chain vulnerability, through threats to safety systems and the vast use of connected devices. Due to historically limited security investments and insufficient employee training, the sector is now facing a skills gap and an increased risk of human error, such as falling for phishing scams or not following best practices.

\n\n

The transportation sector will likely be severely affected by the NIS2 Directive. As a sector that uses a large amount of operational technology, just safeguarding supply chains will be a huge implication as well as protecting real-time data exchange and delivering on a higher level on the operational technology security. All of this will lead to a greater need for higher investments in a shorter perspective, but the increased investment is meant to result in a more secure and resilient industry in the long run, with competitive advantages for companies that are able to invest.

\n\n

Awareness training – one of 10 key cyberhygiene measures

\n\n

The NIS2 directive requires that the transport sector and other essential and important entities implement 10 baseline security measures to address specific forms of likely cyberthreats.

\n\n

- Risk assessments and security policies for information systems.

\n\n

- Policies and procedures for evaluating the effectiveness of security measures.

\n\n

- Policies and procedures for the use of cryptography .

\n\n

- A plan for handling security incidents.

\n\n

- Security around the procurement of systems and the development and operation of systems.

\n\n

- Security procedures for employees with access to sensitive or important data.

\n\n

- A plan for managing business operations during and after a security incident.

\n\n

- The use of multi-factor authentication.

\n\n

- Security around supply chains and the relationship between the company and direct supplier.

\n\n

- Cybersecurity training and a practice for basic computer hygiene.

\n\n

Our new updated 2024 editions of Information Security Awareness training is targeting all employees, managers, executives and boards and is one part of being NIS2 compliant.

Or why not kickstart with our NIS2 Introdution course? This will give your management a better understanding of what your organisation need to be NIS2 compliant.

\n"},{"__typename":"InsightRecord","slug":"the-health-sector-what-s-new-with-nis2","title":"The health sector - what’s new with NIS2?","image":{"url":"https://www.datocms-assets.com/64114/1699524575-nis2-medical-equipment-medicine-lab-hospital.jpeg?fm=webp","alt":null,"__typename":"FileField"},"text":"

With a wider coverage of sectors, stricter requirements for risk management and incident reporting and more hard-hitting penalties for non-compliance, the new NIS2 directive is the most comprehensive European cybersecurity directive yet. The health sector has already been a subject for NIS1, but here’s what both public and private organisations within the health sector need to look out for with the new NIS2 directive.

\n","_modelApiKey":"insight","_publishedAt":"2024-03-28T08:03:25+01:00","contentText":"

The healthcare sector is one of the cornerstones of European society and economy. With the potential for fatal real-life consequences in case of a successful cyberattack, the sector is deemed essential under the NIS2 Directive, subjecting it to the toughest requirements and obligations.

\n\n

There healthcare sector is facing several cybersecurity challenges. A lack of digital standardization in combination with the handling of sensitive information being one of them.

\n\n

Many healthcare organisations are also struggling with aging technology and insufficient resources. The sometimes fragmentated healthcare system is also hampered by several interconnected systems. Also pointed out as one main part of cybersecurity vulnerability is the fact that healthcare employees may not receive sufficient cybersecurity training, which increases the risk of human error and security breaches.

\n\n

NIS2 comes with a wide range of implications for entities in this sector. Healthcare organizations are already subject to strict data privacy regulations and NIS2 adds an additional layer of cybersecurity regulations and stricter protection of patient data and prevention of health service disruption. In a shorter perspective the NIS2 directive has the potential to increase the cost of healthcare delivery, as organizations may need to invest in new technologies and processes to comply. However, in the long term, it is expected to lead to enhanced security, better protection of patient data, and increased trust in digital healthcare services.

\n\n

Awareness training – one of 10 key cyberhygiene measures

\n\n

The NIS2 directive requires that the health sector and other essential and important entities implement 10 baseline security measures to address specific forms of likely cyberthreats.

\n\n

- Risk assessments and security policies for information systems.

\n\n

- Policies and procedures for evaluating the effectiveness of security measures.

\n\n

- Policies and procedures for the use of cryptography.

\n\n

- A plan for handling security incidents.

\n\n

- Security around the procurement of systems and the development and operation of systems.

\n\n

- Security procedures for employees with access to sensitive or important data.

\n\n

- A plan for managing business operations during and after a security incident.

\n\n

- The use of multi-factor authentication.

\n\n

- Security around supply chains and the relationship between the company and direct supplier.

\n\n

- Cybersecurity training and a practice for basic computer hygiene.

\n\n

Our new updated 2024 editions of Information Security Awareness training is targeting all employees, managers, executives, and boards and is one part of being NIS2 compliant.

Or why not kickstart with our NIS2 Introdution course? This will give your management a better understanding of what your organisation need to be NIS2 compliant.

\n"},{"__typename":"InsightRecord","slug":"the-finance-sector-what-s-new-with-nis2","title":"The Finance sector - what’s new with NIS2?","image":{"url":"https://www.datocms-assets.com/64114/1699516466-nis2-finance.jpeg?fm=webp","alt":"DORA course","__typename":"FileField"},"text":"

With a wider coverage of sectors, stricter requirements for risk management and incident reporting and more hard-hitting penalties for non-compliance, the new NIS2 directive is the most comprehensive European cybersecurity directive yet. In recent years, the Finance sector has been subject to increasing regulatory scrutiny to increase its stability and resilience. The NIS2 directive is one of those measures that is set to have a significant impact on the sector.

\n","_modelApiKey":"insight","_publishedAt":"2024-03-28T08:04:11+01:00","contentText":"

It goes without saying that the finance sector is a critical component of the European economy and as such, facing several cybersecurity challenges targeting both the operating systems and the people operating the systems.

\n\n

Phishing Attacks, Web-based attacks and Ransomware attacks targeting both employees and customers are very common and are variations of social engineering attacks. These are still largely effective in the finance sector, where human weaknesses are exploited to compromise sensitive information. Along with these threats there are also threats on a systematic level such as DDoS attacks threatening to disrupt the processing of high-value transactions and financial information and Supply chain attacks targeting weaknesses in the supply chain to compromise financial systems and data, putting sensitive financial information at risk.

\n\n

Finance companies must take a closer look at their existing cybersecurity measures and implement the necessary changes to meet the NIS2 requirements, including ensuring business continuity, managing third-party risks, and protecting financial data. In doing this the implementation of the NIS2 directive is projected to bring substantial benefits to the finance market.

\n\n

Awareness training – one of 10 key cyberhygiene measures

\n\n

The NIS2 directive requires that the Finance sector and other essential and important entities implement 10 baseline security measures to address specific forms of likely cyberthreats.

\n\n

- Risk assessments and security policies for information systems.

\n\n

- Policies and procedures for evaluating the effectiveness of security measures.

\n\n

- Policies and procedures for the use of cryptography.

\n\n

- A plan for handling security incidents.

\n\n

- Security around the procurement of systems and the development and operation of systems.

\n\n

- Security procedures for employees with access to sensitive or important data.

\n\n

- A plan for managing business operations during and after a security incident.

\n\n

- The use of multi-factor authentication.

\n\n

- Security around supply chains and the relationship between the company and direct supplier.

\n\n

- Cybersecurity training and a practice for basic computer hygiene.

\n\n

Our new updated 2024 editions of Information Security Awareness training is targeting all employees, managers, executives and boards and is one part of being NIS2 compliant.

\n\n

Or why not kickstart with our NIS2 Introdution course? This will give your management a better understanding of what your organisation need to be NIS2 compliant.

\n\n

\n"},{"__typename":"InsightRecord","slug":"cybersecurity-is-for-everyone","title":"Cybersecurity is for everyone ","image":{"url":"https://www.datocms-assets.com/64114/1698395941-joakim_hvalby_ute_bla_stort.jpg?fm=webp","alt":null,"__typename":"FileField"},"text":"

With an increase in cyberthreats, it’s more important than ever to get everyone onboard and lift the floor when it comes to cyber security awareness. To do that, it’s important not to make cybersecurity more complicated than it is. Junglemap is now launching the new 2024 edition of our Information Security Awareness for all employees.

\n","_modelApiKey":"insight","_publishedAt":"2023-12-20T11:38:33+01:00","contentText":"

With the threat landscape in constant change, Junglemap does a thorough update every year. Joakim Hvalby, Program Manager Information Security and Privacy at Junglemap, lists five new topics worth paying attention to in this year’s edition.

\n\n

1. Bridge the physical and technical security domain

\n\n

Information security is not only about what happens within digital systems or in the cloud. The way we handle our devices, charge our phones, share our passwords, handle physical documents, and office security, amongst other things, are also important parts of our information security behaviour. The criminals will look for any open access to your information: Gaining access to an office space, planting key loggers revealing credentials, or retrieving passwords on Post-Its “safely” stored under computer keyboards, are great ways to get access to your information.

\n\n

2. Development in phishing using QR code

\n\n

Ever heard of quishing, or QR-phishing? With the frequent use of QR-codes, more and more threat actors use this as an entry point to lure users to fake websites. As more people have gotten used to checking links before they click, the threat actors have started to use QR codes instead. People are often much less used to handling these with a critical eye, and QR codes are more difficult to check if they are safe.

\n\n

3. Focus on digital footprint – give attackers less information

\n\n

Our private online habits often effect our work-related digital presence. Answering a quiz on Facebook may seem like harmless fun. But adding private information to your online presence gives threat actors more to work with. People seeking to launch a successful attack are dependent on information about you to launch an attack that is more likely to succeed. The less information they can find, the less of an accurate attack they are able to craft.

\n\n

4. The AI aspect

\n\n

AI is the double-edged sword of cybersecurity. On the one hand, it’s allowing threat actors to come up with more sophisticated attacks than ever before. But if used wisely, it can also strengthen cyber security. In this ongoing battle between attackers and cybersecurity experts – end user awareness becomes even more important. A phishing e-mail which previously could easily be identified as malicious because of bad language and generic content not relevant to you, is now increasingly harder to identify because of AI. AI technology can now sweep the internet, compiling publicly available information about you, and use this information to craft a phishing e-mail in your local language without spelling errors. This means that you have to be even more aware than ever before.

\n\n

5. Remote work beyond the home office

\n\n

For an increasing number of people, working remotely in 2023 does not mean working from home. With connected devices, people work from the bus, the coffee shop, vacation resorts etc. Very convenient, but this development comes with a new set of security issues. It places an increased responsibility on us to work in a safe manner. Not leaving your devices unattended when going to a restroom whilst working in a café, not spilling company secrets in a work meeting held when on the commute home, and being aware that people might see the information on your screen are some of the behaviours we have to avoid when not working from the office. It’s also important to remember that we have to report all security incidents even though the helpdesk is not just a short walk away, as it is in the office.

\n\n

\n"},{"__typename":"InsightRecord","slug":"security-and-privacy-by-design-training-is-vital-for-companies","title":"Security and Privacy by Design training is vital for companies","image":{"url":"https://www.datocms-assets.com/64114/1699343464-spbd-gdpr25.png?fm=webp","alt":null,"__typename":"FileField"},"text":"

In today's digital age, data protection is paramount. With the introduction of GDPR Article 25 (Data protection by design and by default), organisations face a new imperative: Data protection by Design. Andreas Hegna, Founder at Tagore and partner to Junglemap, explains why training in this area is crucial.

\n","_modelApiKey":"insight","_publishedAt":"2023-11-07T13:31:11+01:00","contentText":"

Legal Compliance: GDPR Article 25 mandates that data protection is integral to systems from the get-go. Companies must design with security and privacy in mind. Training ensures that employees understand the requirements for secure development and its implications.
Data Breach Prevention: Proactive security and privacy design reduce the risk of data breaches. Training equips your team with the skills to spot vulnerabilities and safeguard against them.
Customer Trust: Clients are more likely to trust companies that prioritise their data security and privacy. Embracing Article 25 can boost your reputation.
Cost Savings: Preventing data breaches through proper design is more cost-effective than dealing with the aftermath. A \"shift left\" strategy helps you achieve this. Training pays off by avoiding costly fines and losses. Nano learning training is also a very cost-efficient way to upskill large teams quickly and efficiently without having to pull team members away for vital projects for hours or days.
Competitive Advantage: Demonstrating your commitment to Security and Privacy can set you apart from competitors and attract customers.
Reduced sales friction: By showcasing your security investments you can help reduce sales cycles so that customers more easily can assess the security and compliance in your application without lengthy questionnaires. This is especially useful in these NIS2 times and when developing software.

\n\n

Incorporating Security and Privacy by Design (SPbD) through training isn't just a legal requirement; it's a strategic move to ensure data protection and build trust. Invest in your team's skills and protect your company's future.

\n\n

A new way to solve the challenge

\n\n

The market expects quality and compliance in your products. Regulatory and legal requirements from NIS2, DORA and GDPR can be challenging, and being compliant with ISO27001 is a de facto standard in nearly all ICT-industries. One of the most challenging topics are secure development and security and privacy by design (SPbD) (also known as DevSecOps, SSDLC, SDL or SPbD).

\n\n

Today, development teams often seek training through on-premises full day courses. High quality and accurate of course, but like all classroom-based learning there are some downsides to this:

\n\n

It’s costly.
The team needs to leave work for a full day.
We forget most of what we learn – the forgetting curve also applies to developers.

\n\n

Junglemaps’ course on SPbD takes care of these challenges. By dividing the topics into short 5-minute lessons, and distributing them over time we offer an adapted package that:

\n\n

cost less
allows the team to learn while still in workflow
lifts the competency of large teams to help them understand what it is and how to establish the process
makes everyone remember what they learn – that’s how we beat the forgetting curve.

\n"},{"__typename":"InsightRecord","slug":"energy-sector-what-s-new-with-nis2","title":"The Energy sector - what’s new with NIS2? ","image":{"url":"https://www.datocms-assets.com/64114/1699359837-alternative-energy-blade-clouds-ecology.jpg?fm=webp","alt":null,"__typename":"FileField"},"text":"

With a wider coverage of sectors, stricter requirements for risk management and incident reporting and more hard-hitting penalties for non-compliance, the new NIS2 directive is the most comprehensive European cybersecurity directive yet. The energy sector has already been a subject for NIS1, but here’s what companies within the energy sector needs to look out for with the new NIS2 directive.

\n","_modelApiKey":"insight","_publishedAt":"2023-11-15T12:23:55+01:00","contentText":"

Electricity, oil, gas, district heating, water supply and hydrogen. Due to its critical infrastructure status, the energy sector is highly relevant to the NIS2 Directive, as it provides essential services to the public and is a prime target for cyberattacks.

\n\n

Even though the energy sector is facing several critical technical challenges, like supply chain risks, aging technology and vulnerabilities in their industrial control systems (ICS), the protection against the attack types typically targeting the energy sector can not only rely on technical solutions. A highly interconnected industry like the energy sector also needs to make sure that the employees operating the systems are aware of the cybersecurity risks.

\n\n

The most specific NIS2 implications for the Energy sector include security of energy systems and the overall impact to the energy market along with compliance and enforcement to NIS2 and data protection and privacy with consumers having the right to be informed of any incidents and to request the deletion of their personal data.

\n\n

Awareness training – one of 10 key cyber hygiene measures

\n\n

The NIS2 directive requires that the energy sector and other essential and important entities implement 10 baseline security measures to address specific forms of likely cyberthreats.

\n\n

- Risk assessments and security policies for information systems

\n\n

- Policies and procedures for evaluating the effectiveness of security measures.

\n\n

- Policies and procedures for the use of cryptography

\n\n

- A plan for handling security incidents

\n\n

- Security around the procurement of systems and the development and operation of systems.

\n\n

- Security procedures for employees with access to sensitive or important data,

\n\n

- A plan for managing business operations during and after a security incident.

\n\n

- The use of multi-factor authentication

\n\n

- Security around supply chains and the relationship between the company and direct supplier.

\n\n

- Cybersecurity training and a practice for basic computer hygiene.

\n\n

Cybersecurity training is not only ‘on the list’. It’s a well-known fact that awareness training is an essential part in creating the organisational security culture needed for organisations to be compliant with many of the other security measures mandated by NIS2. Without awareness training all year round, many of the operational procedures will eventually fail – due to human errors.

\n\n

Our new updated 2024 editions of Information Security Awareness training is targeting all employees, managers, executives and boards and is one part of being NIS2 compliant.

\n\n

Or why not kickstart with our NIS2 Introdution course? This will give your management a better understanding of what your organisation need to be NIS2 compliant.

\n"},{"__typename":"InsightRecord","slug":"new-course-on-security-and-privacy-by-design","title":"New course on Security and Privacy by Design","image":{"url":"https://www.datocms-assets.com/64114/1680094800-nils-ivar-skaalerud-andreas-hegna.png?fm=webp","alt":"Portraits of Nils Ivar Skaalerud and Andreas Hegna","__typename":"FileField"},"text":"

Organizations need to prioritize security and privacy. Tagore and Junglemap are now releasing a course on Security and Privacy by Design (SPbD).

\n","_modelApiKey":"insight","_publishedAt":"2023-10-10T11:00:26+02:00","contentText":"

– Our new course teaches managers and teams how to build security and privacy into every step of the development process, and in line with regulations, says Nils Ivar Skaalerud, COO and founder at Junglemap.

\n\n

Earlier this year, Tagore and Junglemap released a role-based course on OWASP Top 10 Web Application Security Risks, targeting product and development teams. With the release of a new course on Security and Privacy by Design, we now offer a course package with the same purpose.
– Managers at all levels need to be aware of the risks and requirements, and support the developers, says Andreas Hegna, CEO at Tagore. We hope that this course package can be a useful tool in doing this.

\n\n

Together, the courses foster a common understanding throughout the organization, emphasizing application risks, security requirements, preparing for incident response and business enablement.

\n\n

Security and privacy activities are crucial, given the constantly evolving threat landscape and the potential consequences of a breach. By incorporating security and privacy at each step in the development process teams are enabled to adopt a \"shift left\"-approach, to manage application security risks early, improving efficiency, while supporting business goals and maintaining compliance.
– This course teaches teams how to build security and privacy into every step of the development process and will help organizations protect their reputation, support the business strategy, save costs, and ensure compliance with regulations at every step of the way, says Nils Ivar Skaalerud.

\n\n

Dynamic and instant reports

\n\n

Managers of course need proof that their team completes lessons, passes knowledge tests and reflects on the course content. Through the Junglemap platform user statistics can be displayed at every level – from company-wide to department and down to the individual — and can be exported as report sheets for presentation purposes.

\n"},{"__typename":"InsightRecord","slug":"finally-moving-into-the-right-direction","title":"Finally moving into the right direction!","image":{"url":"https://www.datocms-assets.com/64114/1686314716-arno-nilsivar-gustav.jpg?fm=webp","alt":"Portraits of Arno van den Hof, Nils Ivar Skaalerud, Gustav Berghog","__typename":"FileField"},"text":"

The last couple of years we have been criticizing the European Cybersecurity Month for being a contra productive initiative implying that cybersecurity awareness is something you can tick off ones a year.

\n","_modelApiKey":"insight","_publishedAt":"2023-10-11T08:46:25+02:00","contentText":"

This year we are super happy to see that the European Cybersecurity Month after 10 years of once-a-year campaigning finally is changing towards a much more useful all-year-round perspective. About time!

\n\n

Because like in all kinds of training, doing your exercises ones a year is not enough. Whether it’s about maintaining a high level of cybersecurity awareness or being able to complete a marathon run – you need to keep practicing over time.

\n\n

This year’s cyber security month themes – phishing and ransomware - make of course perfect sense. Phishing attacks still being the number one threat vector and the steady increase of ransomware costs for business across industries is undoubtedly a strong case for this.

\n\n

For us as an awareness training provider, it’s also obvious that these themes should be addressed from a human centric perspective. With AI in the hands of threat actors, the attacks will not only increase in numbers, but also become more and more sophisticated. A key instrument in combating this is by strengthening your organizational cybersecurity resilience by securing your coworkers' level of cybersecurity awareness – all year round.

\n\n

Many of our customers use our phishing simulation as a part of their overall awareness strategy. But we also see a tendency where many providers solely focus on phishing simulation and offer that as the solution to create cybersecurity awareness. We think this is the wrong way forward. A solid cybersecurity resilience – in a constantly changing threat landscape - needs to rely on a cybersecurity culture built on openness and transparency, and this requires much more than just (an ever so important) phishing simulation.

\n\n

Looking forward we see continuous cybersecurity challenges for both private and public organizations with an ever-increasing number of cyber-attacks. On a more promising note, we also see that cybersecurity is much higher on the agenda in many organizations than just a few years ago. With the implementation of the NIS2 directive we foresee a 2024 where more organizations realize that cybersecurity is no longer something they can tick off once a year to be compliant. Instead, leadership will shift its focus to find reliable methods that can create an increased awareness in the whole of the organization - all year round.

\n\n

We’re happy to join in with the European cybersecurity month on saying ‘Happy cyber-secure new year!’

\n\n

Gustav Berghog, CEO Junglemap

\n\n

Nils Ivar Skaalerund, Founder and COO Junglemap

\n\n

Arno van den Hof, Junglemap Benelux

\n\n

\n"},{"__typename":"InsightRecord","slug":"post-vacation-backlog-remote-work-and-iot-potential-cyberthreats","title":"Post-vacation backlog, remote work and IoT are new potential cyberthreats","image":{"url":"https://www.datocms-assets.com/64114/1691500157-workload.jpg?fm=webp","alt":"Laptop computer with multiple post-its on the screen","__typename":"FileField"},"text":"

Back from vacation with a big e-mail backlog? Ending summer by working remotely? With a mix of private and company connected devices? This could mean an increased cyberthreat.

\n","_modelApiKey":"insight","_publishedAt":"2023-10-17T09:52:39+02:00","contentText":"

E-mails not only remain as a top threat vector. Attackers are also carrying out more e-mail attacks than ever before. Last year phishing attacks increased by 61% compared to the year before and when attackers use legitimate cloud services, attacks are becoming harder to detect.

\n\n

And it’s even harder for someone rushing through a post-vacation backlog.

\n\n

The good news: according to the Microsoft Digital Defense Report basic security hygiene still protects against 98% of all attacks.

\n\n

Remote work and unprotected devices

\n\n

The new hybrid work life often allows a smooth transition from vacation to office routines when many of us are ending summer by working remotely. This often also means a mix in use of company and private devices. Very convenient. But also, a potential increased cyberthreat.

\n\n

According to the Microsoft Digital Defense Report, on average 3,500 connected devices in a company are unprotected. And users with unprotected devices are 71% more likely to be infected.

\n\n

Cybersecurity experts are of course aware that their organizations need to improve endpoint visibility and security. But everyone working remotely also needs to be more aware - all year round.

\n\n

IoT devices – new cyberattack targets

\n\n

By 2025 there will be 41 billion connected devices in the world according to the International Data Corporation (IDC). Internet of things (IoT) is really a driver in todays’ digitalization. But it’s also the most overlooked cyber-attack vector.

\n\n

With increased security on company routers and networks, IoT devices become the new target for cyberattacks. Both in companies and in private homes. According to The State of IoT/OT Cybersecurity in the Enterprise” 6 out of 10 security experts say IoT is the least secured part of their IT infrastructure.

\n\n

Obviously, many organizations need to improve their IoT-security. But everyone enjoying connected devices while working remotely from home also needs to be more aware of this potential cybersecurity vulnerability.

\n\n

Thanks to digitalization and a hybrid work life, coming back to work after vacation doesn’t have to come as a sharp shock anymore. In order for this to maintain a smooth transition – we also need to be aware of the potential cybersecurity threats that this might entail.

\n"},{"__typename":"InsightRecord","slug":"keep-it-short-less-is-more","title":"Keep it short - less is more","image":{"url":"https://www.datocms-assets.com/64114/1691481227-lessismore.jpg?fm=webp","alt":"Man viewed from behind watching a billboard full of notes.","__typename":"FileField"},"text":"

When creating learning content on our NanoLearning-platform the content producer is guided by some technical features and rules based on a mix of best practice and learning research. One key challenge is to keep things short.

\n","_modelApiKey":"insight","_publishedAt":"2023-10-11T10:31:55+02:00","contentText":"

Based on over 15 years of Junglemap user data, we know with a 98% likelihood that a started NanoLearning lesson also is completed. The secret behind these impressive figures is actually no secret: a maximum of three minutes is short enough for anyone to complete.

\n\n

But getting there might be harder than it seems. Killing darlings and limiting the amount of text on each course-page is often a challenge when organisations want to ‘communicate everything that’s important at once’ (and often before a specific deadline as well...).

\n\n

A couple of guiding questions might be some help in finding the right direction:

\n\n

- What’s the goal of this learning effort? What do we want to achieve and how do we measure the result? This should be the starting point when creating new learning content.

\n\n

- What’s most important? Even if many things are important, something needs to be the most important thing. Identify what it is – and focus on that.

\n\n

- When does this topic stop being important? Most issues that organizations need to communicate and comply with are ongoing. Which is a good reason for distributing content over a longer period of time.

\n\n

Scrolling hampers learning

\n\n

When using text-based learning on screen, there’s also a screen-related argument for keeping it short: Scrolling hampers learning. At Junglemap, we work from a strict “less is more” perspective. And there is actually scientific evidence that show that avoiding scrolling, helps learning:

\n\n

In a study from 2006 researchers found that scrolling hampered comprehension and concluded that the students processed printed text more effectively, compared to digital text.

\n\n

Another study from 2009 indicated that a scrolling format reduced understanding of complex topics, especially for readers with a lower working memory capacity.

\n\n

Anyone who wants to make learning accessible for target groups with a variation of memory capacity need to remember that keeping complex topics short can be crucial for some and helpful for everyone.

\n"},{"__typename":"InsightRecord","slug":"avoid-task-switching-in-learning","title":"Avoid task switching in learning","image":{"url":"https://www.datocms-assets.com/64114/1691477930-readingbook.jpg?fm=webp","alt":"Person holding an open book. Laptop computer and cellphone in background","__typename":"FileField"},"text":"

The complexity in todays’ work life is steadily increasing. So is the demand for constant and ongoing learning. But how do we explain complex topics? The answer: By avoiding task switching and taking one thing at a time. Here’s why.

\n","_modelApiKey":"insight","_publishedAt":"2023-10-11T10:37:59+02:00","contentText":"

When creating learning content on our NanoLearning-platform the content producer is guided by some technical features and rules based on a mix of best practice and learning research.

\n\n

To put it simply, these features are designed to avoid task switching and to keep focus on one thing at a time. Simply because this is what (all) human brains need to remember what they learn.

\n\n

Multi-tasking or task switching – a huge difference

\n\n

There’s a lot of talk about multi-tasking. Both as a high demand skill in today’s work life, but also as a risk behaviour possibly leading to illness.

\n\n

Unfortunately there’s a lot less talk about task-switching, which is perhaps even more common, more inefficient, and potentially a greater threat to a healthy work environment.

\n\n

Multi-tasking means using the capacity of both your implicit and explicit memory at the same time. And it usually works fine. Like walk and talks for example. There are many studies that indicate that walking and talking at the same time even increases our thinking ability.

\n\n

The reason for this is that a walk and talk session utilizes two different types of our human memory. Walking, a part of our implicit memory, doesn't require much energy to carry out, whilst the talking (and listening) is a part of our explicit memory.

\n\n

But here’s the thing: We can't use our explicit memory in two different ways at the same time. For example, we can't read and have a conversation with a colleague at the same time. Or sit and write an email while we actively participate and pay attention in a meeting. We might pretend that we can, but we miss out on information doing it.

\n\n

What happens in these situations is that the explicit memory task-switches between the two tasks. This has been proven to be very inefficient,as it takes more time for the brain to switch between multiple tasks.

\n\n

Learning requires focus

\n\n

The same thing applies when designing learning. If we use text in combination with video and sound at the same time, we’re forcing the brain of the learner to task-switch, and consequently lowering the capacity of the explicit memory. This means that som of the things we wanted our audience to remember – are pretty much gone. This is also why NanoLearning is a textbased learning method - it helps the learner to stay focused.

\n\n

Anyone who wants their targeted audiences to remember what they learn, need to avoid task-switching, and to focus on one thing at a time.

\n"},{"__typename":"InsightRecord","slug":"consuming-media-is-not-learning","title":"Consuming media is not learning ","image":{"url":"https://www.datocms-assets.com/64114/1691476739-watchingvideo.jpg?fm=webp","alt":"Man viewed from behind watching a screen","__typename":"FileField"},"text":"

 Video content is king. It’s entertaining and a great way to communicate. But does this mean that we always should use video when creating learning content? The short answer is no: Consuming media is not the same as learning something.

\n","_modelApiKey":"insight","_publishedAt":"2023-10-17T09:53:34+02:00","contentText":"

One of the most important keys to learning is that the preferred method activates your brain in the right way.

\n\n

But how do we do that? How do we best create active learning? With video or text?

\n\n

When introducing the concept of NanoLearning to new customers, we regularly get the question if it’s possible to use video. And of course, it is. But it’s not something we recommend, and there are several reasons for that.

\n\n

Active vs passive learning 

\n\n

Reading is an active process, involving our cognitive resources. When reading a text, our imagination needs to be at the ‘front seat’ too. Watching videos is almost the opposite - it is mostly a passive process.

\n\n

Videos (even good ones) simply feed us with the information directly without us having to take active part in interpreting letters and words. It doesn’t put our cognitive senses into use the way reading does.

\n\n

For further reading we highly recommend this summary: Reading vs watching videos. What science says.

\n\n

Learning at your own pace 

\n\n

All humans learn the same way – but at different paces. This is also one of the main arguments for using text instead of video. When reading a text, it allows the learner to decide the pace. With video, it’s basically one size fits all. Reading also allows the learner to go back and forth without having to rewind or fast-forward the content.

\n\n

Allowing your learners to learn the same things – but at their own pace – is critical. Especially if you know that you’re targeting an audience with a variation in reading habits.

\n\n

Long-lasting learning  

\n\n

One of the overarching goals with NanoLearning is to – step by step – increase awareness and influence behaviors. In order to do that, information needs to be stored in the learners’ long-time memory.

\n\n

And reading is usually the best method to do that. It allows you to easily re-read a passage or paragraph in a text as many times as you want. It also allows you to quickly scan a piece of information and revise the part you want. These factors make it easier to retain information in your long-term memory.  

\n\n

If you want your targeted audience of learners to really remember things – text is the preferred way of achieving this.

\n"},{"__typename":"InsightRecord","slug":"nanolearning-effective-learning-method-for-healthcare","title":"NanoLearning - effective learning method for healthcare","image":{"url":"https://www.datocms-assets.com/64114/1689081559-arno-osnat-en-jenny-zorg-ict.jpeg?fm=webp","alt":"Junglemap coworkers standing on each side of interviewer","__typename":"FileField"},"text":"

Junglemap Benelux was present at the Zorg & ICT and got interviewed about the NanoLearning method. In this short video Benelux MD Arno explains why this new learning method works so well in the healthcare sector.

\n","_modelApiKey":"insight","_publishedAt":"2023-10-10T14:26:40+02:00"},{"__typename":"InsightRecord","slug":"new-features-increased-the-number-of-deals-by-over-30-percent-in-q2-2023","title":"New features increased the number of deals by over 30 percent in Q2 2023","image":{"url":"https://www.datocms-assets.com/64114/1648718833-junglemap_gustav.jpg?fm=webp","alt":"Portrait of CEO Gustav Berghog","__typename":"FileField"},"text":"","_modelApiKey":"insight","_publishedAt":"2023-10-10T14:27:16+02:00","contentText":"

Junglemap had a strong second quarter of 2023 with close to 400 deals – an increase by 30 percent compared to Q2 2022. A new product portfolio, new role-based awareness training and a new AI-function are drivers behind the strong result.

\n\n

Junglemap continue to grow by once again increasing the number of deals in this years’ second quarter. With NanoLearning as a proven method for efficient cybersecurity training as the foundation, Junglemap has also introduced a number of new features during this period.

\n\n

By request from several customers, Junglemap has introduced a role-based awareness training targeting product- and development teams covering the OWASP top 10 list.
With supply chain security becoming increasingly important, Junglemaps new product portfolio offers solutions fitted for all business sizes.
During 2023 Junglemap is also implementing a new AI-feature to the NanoLearning platform, designed to create high quality NanoLearning content. This allows organizations to create awareness trainings much more efficiently.

\n\n

The increased number of deals also illustrates the continuous high demand for efficient cybersecurity awareness training. With cyberattacks still on the rise, and new regulations like the NIS2 directive, cybersecurity is becoming a more strategic issue for all organizations.

\n\n

- We see that organizations of all sizes are struggling to be cybersecurity compliant, with awareness training as a centrepiece, says Gustav Berghog, CEO Junglemap. With our new and upcoming features, we will be able to continue to help organizations be compliant for real.

\n"},{"__typename":"InsightRecord","slug":"managers-need-to-be-leaders-even-in-cybersecurity","title":"Managers need to be leaders – even in cybersecurity ","image":{"url":"https://www.datocms-assets.com/64114/1686314716-arno-nilsivar-gustav.jpg?fm=webp","alt":"Portraits of Arno van den Hof, Nils Ivar Skaalerud, Gustav Berghog","__typename":"FileField"},"text":"

Managers are key when it comes to cybersecurity. But according to Junglemap user data they fall short in acting as leaders when it comes to creating a resilient cybersecurity culture, says Arno van den Hof, Country Manager Benelux, Nils Ivar Skaalerud, COO and Gustav Berghog, Group CEO Junglemap.

\n","_modelApiKey":"insight","_publishedAt":"2023-10-11T11:11:05+02:00","contentText":"

According to Junglemap user data, managers often outperform their employees in completing their cybersecurity awareness courses. Of course, this is a good sign of managers taking their own digital and cybersecurity behaviors seriously.

\n\n

But when employees take a survey after the completion of their latest cybersecurity Junglemap-courses, there’s usually a quite low percentage saying that their managers pay enough attention to cybersecurity.

\n\n

Our simple conclusion is this: managers in general are increasingly aware of the importance of cybersecurity, but they fall short in acting as leaders in creating a resilient cybersecurity culture.

\n\n

Being a manager means that you have many tasks on your desk. Playing a key role in your organizations’ cybersecurity culture being just one of them. In the post-pandemic worklife, working remotely also adds its own security challenges, and responsible managers must take these seriously. For many, this might seem like a challenging task, given that most managers don’t have specific IT- or cybersecurity skills.

\n\n

But this is where many organizations go wrong and make the mistake of viewing cybersecurity as an ‘IT-issue’ when it’s really an operational issue where most organizations need to be much more people centric. The role of the manager in a resilient cybersecurity culture is not about knowing everything about the technical aspects of IT-security. It’s about being a manager and a cybersecurity leader in the organizations’ security culture.

\n\n

To put it simple, there are two levels of security culture:

\n\n

1. Concrete (policies, objectives etc.)

\n\n

2. Abstract (attitudes, norms, beliefs etc.)

\n\n

Both levels affect the organizations’ security climate and managers need to help implement and enforce decisions and policies, and to promote a good security culture among colleagues and employees.

\n\n

As facilitators, managers are simply responsible for making things happen. Establish work processes, delegate tasks, ask the IT-experts for help — and nurture a secure culture and climate. By showing that security is important, supporting employees and trust their competence, they will be motivated to take a personal responsibility.

\n\n

There are basically five key perspectives that all cybersecurity managers and leaders need to keep in mind:

\n\n

• Make cybersecurity conversation a part of the daily routine
By starting the conversation about cybersecurity risks in the day-to day tasks and work. Use ongoing awareness training to provide managers with nice conversation starters.

\n\n

• Let your coworkers shine
Allowing a team member with some expertise or knowledge about security to share that knowledge or examples is a great way of building a security culture.

\n\n

• You don’t need to have all the answers
Leaders shouldn’t be afraid to be vulnerable and admit that they don’t know all the answers. In fact, sometimes this enables team members to speak up and share knowledge with the group. Be transparent in displaying your own mistakes.

\n\n

• Reward openness
Share lessons learned with the team and don’t keep them to yourself. Or give the stage to a member of the team to tell something about it: this facilitates a culture where it is ok to report mistakes and rewards openness.

\n\n

• Actively search for answers
Managers must lead the way to where their coworkers can find the answer and stay curios themselves. If an individual question becomes the quest of the team, it drives a common knowledge development.

\n\n

Junglemap have just released a new updated version of or course Information Security Awareness for Managers were we in 9 short 3-minute lessons highlight the key issues that managers need to be aware of in order to act as cybersecurity leaders – without being technical IT-experts.

\n"},{"__typename":"InsightRecord","slug":"cybersecurity-and-privacy-challenges-in-the-healthcare-sector","title":"Cybersecurity and privacy challenges in the healthcare sector","image":{"url":"https://www.datocms-assets.com/64114/1686293540-announcement-webinar-healthcare-linkedin-event-banner.png?fm=webp","alt":"A webinar banner showing the participants in the conversation","__typename":"FileField"},"text":"

The health sector is being targeted with an increasing number of cyber-attacks, jeopardizing the security of both individual patients as well as organizations. Figures from the Dutch Data Protection Authority (AP) show that the Healthcare & Welfare sector takes the lead when it comes to data breaches.

\n","_modelApiKey":"insight","_publishedAt":"2023-06-12T10:50:00+02:00","contentText":"

We invited privacy & security professionals Lynn de Vries (Rijnstate hospital) and Charlotte Straus (Merem medical rehabilitation) to share their experiences and best practices from cybersecurity and privacy awareness training in the Dutch health care sector.

\n\n

Watch the full webinar on LinkedIn.

\n\n

What are the challenges in creating a good and sustainable security and privacy culture within health organizations?

\n\n

The challenges the medical rehabilitation is facing, just as other health organizations, is the lack of time but also the lack of interest in these subjects. ‘Junglemap’s NanoLearning face these subjects with examples which are relatable in both private and work life. For example, using safe passwords and the characteristics of phishing mails, says Charlotte Straus. One of the solutions to tackle the problem of time is to provide privacy and security ‘snacks’. Easy digestible lessons which don’t take time from your agenda; they only take 2 to 3 minutes to complete.

\n\n

Besides all the mandatory medical training the healthcare professionals have, privacy and security awareness training is basically competing with it. As Lynn de Vries also mentions; ‘We need to be careful with patient and employee data and repeat the importance of this all the time. Also think through when sending awareness lessons and how to approach it. We make it as low-threshold as possible but, at the same time, we send a link in an email, while we tell our people to not click on links in emails.’

\n\n

Charlotte Straus adds to that; ‘Communication is key here. We started announcing the awareness training way before by sending from what email address the lessons will be sent, at which moment the employees will receive the NanoLearning in their inbox and - with a screenshot - how a lesson and/or the email will look like. That makes them feel safe clicking and helps our employees starting and completing the lessons.’

\n\n

Talking about a good cyber security culture, Arno van den Hof, Country Manager for Junglemap in the Benelux says; ‘it takes time and effort to create a decent cyber security culture. I heard no one ever saying that they look forward to the security or privacy training because these are just not the most beloved topics to learn about.’ While organizations are being hacked and affected with ransomware, we need to be very careful. Health care is handling a lot of sensitive data, and people can make mistakes. That’s just how human beings are, but by learning from mistakes a good security culture can grow.

\n\n

Regarding risks and developments from the hacker side, Lynn de Vries says; ‘The methods criminals are using, are becoming more and more advanced. which means that we need to be even more aware. For instance, phishing mails are not as easily recognisable as before. We are very happy when people approach us to ask whether an email is safe since it means that they are aware of the risks. Phishing attempts are happening daily, so you need to be aware of what the possible threats are and how to respond to it.

\n\n

Charlotte Straus adds to that; ‘It’s an ongoing trend and it will be even more important in the future.’

\n\n

How can we foster good cybersecurity and privacy behaviours in an environment with an already challenging workload?

\n\n

In addition to what’s said above, Arno van den Hof adds; ‘after a week people have already forgotten more than half of what they’ve learned in the traditional e-learning that often takes at least half an hour to complete. By splitting the information into smaller pieces, relating subjects in upcoming lessons and use repetition, we help people remember what they’ve learned.’ These topics are too important to just train once or twice a year.

\n\n

Charlotte Straus says, ‘We get compliments of employees on the learning method we use and the number of intern notifications of privacy and/or security (near) incidents slightly increase. That’s a good thing which means people start recognizing suspicious stuff and make a notification.’ ‘We also see that external auditors appreciate the awareness method we use.’ Adding to that, Lynn de Vries says; 'We show compliance by using awareness training, it’s an ongoing process. If we can help people to increase their completion rates, we’re happy to help! We are glad they ask us questions and get more pro-active.'

\n\n

How can we get awareness training in place – when there’s a constant lack of time?

\n\n

Lynn de Vries tells us that employees sometimes say that they have no time to do the training and don’t like that they get reminders when not finishing lessons. ‘Now people start doing lessons together as a team, it only takes 3 minutes, and it helps bringing up conversations about privacy and security. This snowball effect is exactly what helps in remembering important topics.’

\n\n

Both Charlotte Straus and Lynn de Vries agree on the positive effect of reporting in the NanoLearning platform. ‘The completion rates are much higher than traditional e-learnings and opening rates of newsletters we send out within the organization.’ Besides that, Charlotte Straus points out that for the NEN7510, which is the information security standard in the health care sector in the Netherlands, organizations need to show what they do on creating awareness on a structural basis. ‘The auditor appreciates the method with positive effect we’re using now.’

\n\n

Rounding off, Arno van den Hof is highlighting; ‘Having employees complete the lessons is what you want to achieve. Organisations struggle to maintain focus on awareness and repetition is a great way to help people remember things. Completion rates are usually not that high. AI is making it more difficult with for example deep-fake voice and video to recognise scams. Technology is going fast, and criminal organisations will make bad use of it and try to mislead us. We need to be more aware than ever, and it will be even more important in the future. The impact is increasing by time.’

\n\n

\n"},{"__typename":"InsightRecord","slug":"we-need-to-re-think-the-scope-of-cybersecurity-training","title":"We need to re-think the scope of cybersecurity training ","image":{"url":"https://www.datocms-assets.com/64114/1648718833-junglemap_gustav.jpg?fm=webp","alt":"Portrait of CEO Gustav Berghog","__typename":"FileField"},"text":"

The increase in cyberattacks has also led to an increase of organizations that have cybersecurity programmes in place. The problem is that these programmes don't seem to work. Organizations need to re-think cybersecurity and awareness training, says Gustav Berghog, Group CEO at Junglemap in a comment to the 2023 Cyber Workforce Resilience Trend Report from Immersive Labs.

\n","_modelApiKey":"insight","_publishedAt":"2023-10-11T11:12:22+02:00","contentText":"

At first it looks like good news that 85 percent of +1000 organizations do have some kind of cybersecurity programme in place. It’s a clear notion that management across industries acknowledge not only the increasing number of cyberthreats, but more importantly the need to build security. According to the Immersive Labs report, strengthening cyber capabilities \"tops the list of strategic priorities for organizations in 2023, with increasing the cyber resilience of cybersecurity team members (83%) and the general workforce (75%) identified as the two highest overall focus areas.”

\n\n

The problem is that most of these programmes don’t seem to be working.  According to the report, almost all organizations encourage industry certifications, but only 32 percent say they are effective at mitigating cyber threats.

\n\n

One of the key elements in creating a resilient security culture spells awareness. For us at Junglemap, providing distributed cybersecurity awareness training all year round, the survey results don’t come as a surprise: “Classroom training is offered too infrequently to be effective, with only 27 percent of respondents indicating they are receiving monthly training.”

\n\n

Which of course is the reason that “almost half of respondents (46%) say their employees would not know what to do if they received a phishing email, despite years of security awareness training and phishing tests.”

\n\n

To me, these numbers states the obvious: organizations need to re-think the scope of their cybersecurity awareness training. Ad hoc classroom trainings or traditional e-learning simply doesn’t create awareness.

\n\n

But NanoLearning does.

\n\n

Built on the three simple but important learning principles of repetition, reflection and reinforcement, our NanoLearning courses consist of 3-minute lessons distributed to all employees, every third week – all year round. This bite-sized format ensures that the training is taking place, the frequency allows the important spacing effect, and the content is designed to create reflection and retrieval practice.

\n\n

Measurable effects

\n\n

Not even a well-designed awareness training is a guarantee for not being affected by cyberattacks. What we guarantee is that the effects can be measured. And according to the Immersive Labs report, this is also something that many organizations struggle with:

\n\n

“Almost half (46%) of senior security and senior risk leaders say they do not have the metrics they need to fully demonstrate their workforce’s resilience in the face of a cyberattack.”

\n\n

An important part of creating cybersecurity awareness with Junglemap is that management on all levels are able to follow up on the training. This is why we include dynamic real time management reports in our plans. And we know that this is highly appreciated and well used in many organizations. Getting rid of the FOFO (Fear Of Finding Out) and actually dealing with challenges based on clear metrics is the best way going forward.

\n\n

So how should we view the importance of certifications and compliance? As supply chain security becoming even more important in order to create security, we see many SME:s struggling with showing that they are doing their cybersecurity homework.

\n\n

And of course it is important with transparent certificate that really show that your organization have your cybersecurity awareness in place, but when it comes to a thing like awareness – the certificates issued should confirm that you are in an ongoing process. Not that you did something in the past.

\n\n

Gustav Berghog
Group CEO Junglemap

\n"},{"__typename":"InsightRecord","slug":"awareness-training-needs-to-be-a-part-of-your-cybersecurity-culture","title":"Awareness training needs to be a part of your cybersecurity culture","image":{"url":"https://www.datocms-assets.com/64114/1684234804-junglemap_stockholm_office_per_lagerstrom_kontor-edited.png?fm=webp","alt":"Image of Per Lagerström at the Junglemap Stockholm office","__typename":"FileField"},"text":"

”Awareness doesn't translate to action”. The message from a recent report on password behaviors might seem like a blow to any actor offering awareness training. And it's true; security awareness training does not do (the whole) trick. But it is a key feature for any organization creating a resilient security culture, says Per Lagerström, Head of Communications at Junglemap.

\n","_modelApiKey":"insight","_publishedAt":"2023-10-11T11:16:02+02:00","contentText":"

The key findings from the LastPass Annual Report 2022 speak for themselves:

\n\n

“With 65% of those surveyed claiming to have some type of cybersecurity education, the majority (79%) found their education to be effective, whether formal or informal. But out of those who received cybersecurity education, only 31% stopped reusing passwords. And only 25% started using a password manager.”

\n\n

Receiving awareness training, regardless of how good it is, is obviously not enough. If the training is not a part of an organizational security culture where we as individual co-workers can do security according to what we just learned, it simply won’t create the security behavior we were aiming for.

\n\n

In worst case, also shown in the LastPass Report, it can create a false sense of security. Where a sense of knowing what to do is mistaken for what we actually do in practice: “With 73% of respondents rating their current password behaviors as safe, and 89% aware that using the same password or variation is a risk, respondents are switching from one bad habit to another in their quest to make password management as easy as possible” the report says.

\n\n

And it’s potentially getting worse. When comparing different age groups, Gen Z (born 1997–2010) – now entering the workforce – have the highest self-esteem when it comes to cyber security. While the Boomer generation (born 1946–1964) now leaving the workforce, represent the opposite: less confident about their password management but more cautious – and with the best password hygiene across generations.

\n\n

The report also refers to only 33 percent of Millenials and Gen Z being stricter and more careful when it comes to work-related password management. With a new connected and hybrid work life the borderland between peoples’ private and work life becomes a new vulnerable area where co-workers mix their private and professional IT-habits and environment. This was also one of the themes in the F-secure Annual Threats Guide 2023 earlier this year.

\n\n

So how can a culture of cybersecurity help – and what does it mean in practice?

\n\n

Awareness training is targeted to deliver just that: a raised awareness. But end-users are still on a quest to make password management as easy as possible – and we need to have tools in place to allow that with the same level of security.

\n\n

As a part of the information security program at Junglemap, we run our own NanoLearning courses. With 3-minute lessons every third week, we’re allowed to both repeat, reflect and have our new learning reinforced all year round – creating and maintaining a higher security awareness.

\n\n

The chances that any of us would do this on our own are low – according to the LastPass report 65% did not seek out any cybersecurity education on their own.

\n\n

This is also one of the main reasons why NanoLearning from Junglemap is a distributed way of learning. We target the great majority that lack time or motivation with the same message and content, at the same time.

\n\n

But at the end of the day, it’s the combination of raised awareness, and the organizational and technical tools that create new and safer behaviors. Last time I checked, I had 71(!) secure passwords within our mandatory password manager. There is simply no way I could have remembered all of these without a password manager.

\n\n

On the contrary, the risk of me starting to re-use old passwords would increase dramatically.

\n\n

Even though I'm aware of the risk.

\n"},{"__typename":"InsightRecord","slug":"using-ai-is-a-great-help-when-creating-nanolearning","title":"Using AI is a great help when creating NanoLearning","image":{"url":"https://www.datocms-assets.com/64114/1650353596-junglemap_nils_ivar.jpg?fm=webp","alt":"Portraid off co-founder & COO Nils Ivar Skaalerud","__typename":"FileField"},"text":"

Five quick questions to Nils Ivar Skaalerud, COO at Junglemap who now introduces a new AI feature for content creation, which will be included in the new Junglemap Enterprise package.

\n","_modelApiKey":"insight","_publishedAt":"2023-10-11T11:17:24+02:00","contentText":"

Why is Junglemap adding an AI-feature?

\n\n

- Many of our customers have a great need for NanoLearning to create awareness on many more topics, but lack the resources and time to do so. Using AI is a great way of create high-quality content in less time which fits customer’s specific needs.

\n\n

What’s the difference between the Junglemap AI service and ChatGPT?

\n\n

- We take AI one step further. With ChatGPT, you prompt and iterate until you get a good text. With our service, we have developed a model that creates good NanoLearing-courses, based on solid pedagogical principles. We combine the power of AI with years of experience in creating effective learning content. The AI-generated courses are built according to a model that has been successful for almost 20 years.

\n\n

Isn’t there a need for human content creation anymore?

\n\n

- Yes of course there is! Using AI in the process gives you good quality building blocks of content. But pedagogy is a science, prompting is a science and in our AI service we combine expertise in both, to create learning material that targets all employees. And there’s always a need for quality assurance and adaptation. That’s why we offer content creation onboarding and introduction to NanoLearning best practice led by our own content team.

\n\n

What are the privacy and security implications of an open AI solution?

\n\n

- When using our AI service, you need to consent with sharing your information with OpenAI. In doing that you need to have a clear idea what you want to share and not according to your own organizations privacy policy.

\n\n

What are your best tips for an organization thinking of using AI in creating NanoLearning?

\n\n

- Combine what AI does best – fast content creation – with your own expertise and knowledge of the intended recipients. Always use a combination of AI created content with human quality assurance.

\n"},{"__typename":"InsightRecord","slug":"increased-digital-vulnerability-during-worcation","title":"Increased digital vulnerability during worcation","image":{"url":"https://www.datocms-assets.com/64114/1683024806-workingfromhome_f-secure.png?fm=webp","alt":"Woman looking at cellphone while attending two small kids","__typename":"FileField"},"text":"

Where is your organizations’ digital vulnerability? In company firewalls and virus programs? Or in the cell phones in the hands of your employees' children? Maybe on a laptop or mobile currently looking for free Wi-Fi at an airport? This is the perfect season for paying more attention to the digital vulnerability in the borderland between leisure and work, says Joakim Hvalby and Gustav Berghog from Junglemap.

\n","_modelApiKey":"insight","_publishedAt":"2023-10-11T11:18:21+02:00","contentText":"

The number of malware-attacks are still on the rise. According to a recent study by F-secure one in three internet users have been targeted with different types of cyberattacks the last year.

\n\n

The threat actors are getting increasingly creative in their operations. But there are also some significant trends to be followed. The various types of malware attacks often target people's private digital environment. Outside the IT manager and the company's cyber security rules. The digital environment where it is the easy accessibility that drives the behavior, gaming, shopping, entertainment, social media or travel bookings.

\n\n

A challenge for many of the CISOs of our customers is that employees bring their private digital behavior to work - and vice versa - with the hybrid working life as the new normal, many companies' IT equipment is used continuously at home, on public transport or at cafes. And during vacation.

\n\n

Malware as a service

\n\n

In 2022, many of the most common malware attacks were built on so-called malware as a service, which is exactly what it sounds like: offerings on the darknet where criminals with no cyber skills of their own can download and use AI to adapt malicious code to then target specific audiences, contexts or platforms and apps. All in all, it can be stated that malware as a service has made it much easier for more criminals to also step out into cyberspace. Without actually having the IT skills themselves.

\n\n

We simply need to put more focus on something we can perhaps call \"the 2023 cybercrime cocktail\" - the combination of malicious code and the new generation of AI as an aid.

\n\n

The risk assessment in cyber security is normally based on a threat actor's willingness and ability to carry out an attack. In the past, many threat actors have indeed had the will, but lacked the ability. When the same threat actors now able to use AI for help, we see a sharp increase in the number of attacks. Attacks that are also much more sophisticated and effective than before.

\n\n

7 steps for protection

\n\n

There are several easy steps to protect yourself against malware and entering the holiday season is a perfect time to go through them again.  

\n\n

Only download official apps from official app stores.
Compare apps even from official app stores. Check how other users rate before you download.
Limit the permissions you give apps so they don't have more rights than necessary.
Delete apps you no longer use.
Update apps as soon as possible, so that cybercriminals do not have time to exploit vulnerabilities.
Avoid unknown links, sources, attachments and apps
Avoid auto-fill. A classic example of \"digital agility\", but also a common source of information theft.

\n\n

This list is not unique. It is also easy to understand. The challenge is to incorporate these recommendations into your everyday digital behavior and routines. Both at work and in private life, and not least in the borderlands in between – during the worcation period.

\n\n

At Junglemap, we design our cybersecurity awareness training on something we call the STAR-model. A set up designed to enhance a behaviour where we stop, think, ask and report things that look suspicious.

\n\n

In this way, we help companies and organizations reach their employees with small, short reminders about information security.

\n\n

That’s how we become more cybersecurity resilient. In office, working remotely or on worcation.

\n"},{"__typename":"InsightRecord","slug":"junglemap-new-member-in-cyberveilig-nederland","title":"Junglemap new member in Cyberveilig Nederland","image":{"url":"https://www.datocms-assets.com/64114/1669888481-arno-van-den-hof.jpg?fm=webp","alt":"Portrait of Arno van den Hof, male in his 40's, in office","__typename":"FileField"},"text":"

Junglemap Benelux BV has recently become a member of Cyberveilig Nederland – Netherlands leading branch organization for the cybersecurity sector. – A great opportunity to create new partnerships, to learn and to contribute to a safe and more resilient Dutch market, says Arno van den Hof, General Manager for Junglemap in the Benelux.

\n","_modelApiKey":"insight","_publishedAt":"2023-10-10T14:30:28+02:00","contentText":"

Cyberveilig Nederland wants to increase the quality and transparency within the growing cybersecurity sector. The organisation was founded in 2018 and now represents a large and growing base of cybersecurity service providers.

\n\n

Junglemap is now joining this network with more than 80 different organizations in the cybersecurity sector, and Arno van den Hof sees great potential in adding value to the network with the awareness expertise of Junglemap.

\n"},{"__typename":"InsightRecord","slug":"product-and-development-teams-have-a-key-role-in-cyber-security","title":"Product- and development teams have a key role in cyber security","image":{"url":"https://www.datocms-assets.com/64114/1680094800-nils-ivar-skaalerud-andreas-hegna.png?fm=webp","alt":"Portraits of Nils Ivar Skaalerud and Andreas Hegna","__typename":"FileField"},"text":"

We talk a lot about secure servers, multi-factor authentication, strong passwords, and updating devices to patch security holes. And that’s good. But an equally important, but often overlooked, security risk is poor communication between developers, middle managers and top management. Many major security incidents could have been avoided if the three levels communicated better.

\n","_modelApiKey":"insight","_publishedAt":"2023-10-11T11:19:20+02:00","contentText":"

Sometimes it’s a matter of lack of engagement, but more often it’s a lack of knowledge that threatens safety. Unfortunately, this applies to both developers and product managers. Developers need to learn how to flag vulnerabilities, and product managers need increased security skills to give developers the time and space to deal with them.

\n\n

Furthermore, all companies need product managers who have enough confidence to raise security challenges in meetings with top management and policy makers. It's often a tough fight. Security and integrity take time and doesn’t give the same immediate return on investments as developing new products and services.

\n\n

Vulnerabilities such as bad authentication and cryptography errors have been on OWASP's top 10 list for many years and are known to many developers. But how many middle and senior managers listen when developers point out such vulnerabilities? Our experience is that not many are taken seriously, and that security remains a footnote in development and design processes.

\n\n

The number of demands for higher security competence in development teams is on the rise. Wich is good, since this in itself is a big need. But the security challenges will remain unless managers at all levels become aware of the risks, support the developers, and take the risks seriously.

\n\n

Managers and developers alike need to understand how criminals think. Only then will senior managers take them seriously.

\n\n

New OWASP top 10 course

\n\n

With decades in the IT industry, we have seen the consequences of poor communication far too often. That's why Junglemap and Tagore in collaboration have now developed a new role-based course for product and development teams.

\n\n

Nils Ivar Skaalerud, COO Junglemap and Andreas Hegna, CEO Tagore.

\n\n

\n"},{"__typename":"InsightRecord","slug":"dubbla-cyberhot-mot-transportsektorn","title":"Dubbla cyberhot mot transportsektorn","image":null,"text":"","_modelApiKey":"insight","_publishedAt":"2023-10-11T13:13:29+02:00","contentText":"

\n\n

Även transportsektorn är utsatt för ökade ransomware-attacker. Dessutom rör det sig om dubbla hotbilder. Dels ekonomisk utpressning, dels olika typer av cyber-terror med sikte på infrastrukturen, delvis som en följd av Rysslands invasionskrig i Ukraina. Det visar en ny rapport från ENISA, EUs myndighet för cybersäkerhet.

\n\n

Transportsektorn är lika utsatt för cyberangrepp som andra viktiga samhällssektorer. Det som enligt ENISAs rapport skiljer sig, är att hot-aktörer inte bara siktar in sig på ekonomisk utpressning, utan även attacker för att åstadkomma strukturell skada i den samhällskritiska sektor som transporterna utgör. I rapporteringen av mer omfattande incidenter finns däremot inga attacker som direkt påverkar säkerheten i själva transporterna.

\n\n

ENISA konstaterar att grupper av hot-aktörer som ägnar sig åt ransomware sannolikt kommer att fortsätta att rikta attacker mot transportsektorn och lyfter i rapporten fram fem skäl olika till detta:

\n\n

• Den pågående digitala transformationen av transportsektorn och den ökade kopplingen mellan IT-miljön och transportsektorns operationella nätverk.

\n\n

• Den ökade viljan att betala lösensummor för att undvika negativa effekter på affärer eller varumärke.

\n\n

• Hot-aktörernas ständiga utveckling och ökade förmåga att kombinera ransomware-attacker med attacker mot kritisk infrastruktur.

\n\n

• Det ryska invasionskriget i Ukraina kommer sannolikt leda till att pro-ryska ransomware och hacker-grupper kommer att utföra vedergällningsattacker mot infrastruktur i väst.

\n\n

• Det ökade antalet upptäckta sårbarheter inom operationella nätverk.

\n\n

För den som vill öka sin förmåga att skydda sig mot kommande cyberattacker hänvisa ENISA till den sektorsövergripande rapporten Threat Landscape 2022 där bland annat behovet av återkommande utbildning för ökade medvetenhet ingår som en del.

\n\n

\n"},{"__typename":"InsightRecord","slug":"junglemap-presents-a-strong-first-quarter-2023","title":"Junglemap presents a strong first quarter 2023 – increased the number of deals by 30 percent","image":{"url":"https://www.datocms-assets.com/64114/1648718833-junglemap_gustav.jpg?fm=webp","alt":"Portrait of CEO Gustav Berghog","__typename":"FileField"},"text":"

Junglemap had a strong first quarter of 2023 with over 400 deals – an increase by 30 percent compared to Q1 2022. The demand for strengthened cyber security and increased awareness remains high.

\n","_modelApiKey":"insight","_publishedAt":"2023-10-10T14:31:13+02:00","contentText":"

Junglemap had a strong 2022, with 300 new customers and over 1200 deals. At the same time, the company passed another milestone and has now reached over 7 million users with NanoLearning since its inception.

\n\n

And the strong trend continues. In the first quarter of 2023, Junglemap made over 400 deals – an increase of 30 percent compared to the previous year. One explanation is the increasing number cyber threats, which leads to more companies and organizations putting cyber security higher on their strategic agendas.
- We see a continued strong demand for our services, says Gustav Berghog, CEO Junglemap. Ways to strengthen their human firewalls with functional and cost-effective learning is exactly what many organizations are looking for.

\n"},{"__typename":"InsightRecord","slug":"secuza-consulting-and-junglemap-benelux-partner-up-for-better-cyber-security","title":"Secuza Consulting and Junglemap Benelux partner up for better cyber security ","image":{"url":"https://www.datocms-assets.com/64114/1681224147-partnership-secuza-junglemap.png?fm=webp","alt":"Three men standing outside in front of office building","__typename":"FileField"},"text":"

The consequences of a cyber attack have a huge impact, and any company can be affected. That makes it extra important to invest in cyber security in our rapidly growing digital world.

\n","_modelApiKey":"insight","_publishedAt":"2023-10-11T11:22:07+02:00","contentText":"

Secuza Consulting and Junglemap Benelux have signed a partner agreement. The collaboration will start from the 1st of April 2023 and the companies will reinforce each other in the services they both offer. For example, Junglemap can provide Secuza's customer demand for awareness training with NanoLearning and, conversely, Secuza can provide consultancy and security assessment services to Junglemaps customers.

\n\n

‘Security awareness training is one of the most important aspects of any cyber security landscape. The advantage of this collaboration is that we can offer each other's services to many more and diversified clients from different sectors, says Alok Saxena - Secuza Consulting.

\n\n

‘Trust is extremely important when providing security services. From our first meeting, we recognized the same passion for good solutions that are accessible and affordable, without compromising on quality. Doing what really works - that's why we like to work together’, says Arno van den Hof - Junglemap Benelux.

\n"},{"__typename":"InsightRecord","slug":"dora-an-opportunity-for-increased-security-in-the-finance-sector","title":"DORA – an opportunity for increased security in the finance sector","image":{"url":"https://www.datocms-assets.com/64114/1680090243-dora-financesector.jpeg?fm=webp","alt":"man sitting in front of computer screens showing stock market statistics","__typename":"FileField"},"text":"

By January 17th 2025 all financial operators need to be compliant with DORA (Digital Operational Resilience Act). With the intention of reducing systemic risk, DORA has implications for all financial operators – but also offers the opportunity for the whole financial sector to improve its digital resilience. Starting the work now, is key.

\n","_modelApiKey":"insight","_publishedAt":"2023-10-11T11:23:02+02:00","contentText":"

With a massive 55 percent increase in overall threat detections in 2022, the need for a more proactive and harmonized EU-regulation becomes urgent. In that respect, DORA is a key component for a continuous digital innovation of all financial services.

\n\n

Security resilience in focus

\n\n

With the vast number of attacks, protection alone is simply not enough. Instead, security resilience with the ability to be prepared for an event, knowing what and where to report an incident and get your services back up and running again after an event occurs, is crucial. And also to document these routines and processes.

\n\n

For most actors within the financial sector, most things needed are already in place. The challenge now is to allocate and make all functions work together. For many actors, it’s about avoiding the risk of not being compliant, by going from a best practice to a more systematic, documented cybersecurity management.

\n\n

Five pillars

\n\n

In order to be DORA compliant, financial actors need to have the operational routines for five core pillars in place:

\n\n

ICT Risk Management
DORA require resilient ICT systems and tools, along with the ability to identify, classify and document protection, detection, and prevention measures. Actors also need to be able to respond and recover, learn, and evolve, with communication plans in place.
ICT Incident Management
By following the information security lifecycle actors need to have an incident management process in place. With routines for classification of incidents and threats, with high attention on post-incident review and analysis of root causes, and also with a required reporting of major ICT-related incidents to the right authorities.
Operational resilience testing
Actors need to test capabilities and functions, with a risk-based approach. They also need to execute a full range of appropriate tests, including advanced threat-led penetration testing and requirements on third party testers.
Third party risk management
Monitoring ICT third-party risks, by registering information of the use of third-party providers, become mandatory. Always with an assessment before contractual arrangement and with content requirements for contracts.
Monitoring and reporting
All actors need routines for reporting incidents, both internal and in exchange with other financial entities, and also for external reporting of major ICT-related incidents.

\n\n

In order for these pillars to function properly, a good cybersecurity governance model need to be in place, securing roles and responsibilities, safeguarding the digital operational strategy and policies, and oversee and review risk control and monitoring.

\n\n

Start planning the work now

\n\n

January 2025 might seem far away but the key in being DORA-compliant is to start planning the work now. Make use of operations already in place, prioritize the work, and ask for assistance when needed.

\n\n

Through our NanoLearning platform, Junglemap offers awareness as a service, which can be helpful when learning and awareness programs become mandatory, alongside with management participation in security.

\n\n

With our standard courses in information security for all employees, for managers, and role-based courses targeting product and development teams, we hope to contribute with an important tool for any organization working to become digitally resilient.

\n"},{"__typename":"InsightRecord","slug":"awareness-training-a-key-in-nis-2-compliance","title":"Awareness training – a key in NIS 2 compliance","image":{"url":"https://www.datocms-assets.com/64114/1679413169-eu-cybersecurity-nis2.jpeg?fm=webp","alt":"Image where two hands holding a cellphone next to a padlock surrounded by EU-stars","__typename":"FileField"},"text":"

What is the EU Network and Information Security Directive 2 (NIS 2) impact on cybersecurity awareness training? The short answer: with a wider scope targeting more companies and organizations with an updated reporting process, we need to focus even more on how to create awareness that lasts over time.

\n","_modelApiKey":"insight","_publishedAt":"2024-03-28T08:02:52+01:00","contentText":"

Apart from the overarching goal of a better EU sync and cooperation on cybersecurity, the NIS2 directive comes with a broader scope and a wider definition of what is included in the definition of essential or important entities. And even though the NIS2 directive does not apply to micro companies, there are other aspects that lead to the need to strengthen the whole security culture within the organization. For any organization to be compliant with reporting near misses or including their supply chain security – a cybersecurity culture that involves the whole organization is crucial.

\n\n

Detecting emerging threats

\n\n

The proposed update to the original NIS Directive aims to address emerging cybersecurity threats and enhance cybersecurity in EU member states by extending its scope to cover more sectors, including digital service providers (DSPs) and platforms.

\n\n

As a result, organizations in these sectors would be required to comply with the NIS 2 directive and implement measures to prevent and minimize the impact of cyber incidents. One of the key requirements of the directive is to ensure that staff members who have access to sensitive systems and data receive adequate cybersecurity training and awareness.

\n\n

Therefore, organizations in the affected sectors would need to develop and implement comprehensive cybersecurity awareness training programs for their employees. The training would need to cover topics such as identifying and reporting cybersecurity incidents, safe use of IT systems and networks, and best practices for protecting sensitive information.

\n\n

The NIS 2 directive also requires organizations to conduct regular training and awareness assessments to ensure that employees are equipped with the necessary knowledge and skills to prevent and respond to cybersecurity incidents.

\n"},{"__typename":"InsightRecord","slug":"chatgpt-wants-to-help-you-too-much","title":"Don’t be fooled. ChatGPT wants to help you – too much","image":{"url":"https://www.datocms-assets.com/64114/1679497580-hanna-ronnqvist.jpeg?fm=webp","alt":"A portrait of Hanna Rönnqvist, female in her 30s in front of a off-white wall","__typename":"FileField"},"text":"

As a content producer, using AI to help you with ideas, reformulate tricky sentences or ask for input, has become a natural part of work. But beware when it comes to asking for sources to back up a claim or generate a scientifically backed up paper – here’s why.

\n","_modelApiKey":"insight","_publishedAt":"2023-10-10T14:33:01+02:00","contentText":"

Good for summarizing and simplifying.

\n\n

Just a couple of months into life with generally available Open AI, it has already become second nature to many writers and researchers. In just a couple of seconds it can help you with a simpler proposition for your complicated sentence, abbreviate or summarize a text, or even give you handy recommendations on SEO words to add into your text. But when asking for tips on peer reviewed science articles on a subject to back up a claim, we realized that at least the present version of ChatGPT has its clear limitations.

\n\n

AI is really helpful – sometimes a bit too helpful

\n\n

The top reference of the list sounded perfect, exactly what I was looking for! When asked for a quick summary of the abstract, ChatGPT provided it and it really seemed to fit the research question. Very helpful! There was just one hiccup. The text did in fact not exist anywhere. I started searching on Google Scholar. Google. Heck, I even ventured into Bing, but no luck. The authors existed, but they had never co-written anything that I could find. Neither did the title seem to generate any hits. I asked ChatGPT if any of the references may have been generated, and it sternly claimed that All of the references I provided are real and valid scientific papers that have been published in reputable journals.

\n\n

Not all references are generated equal

\n\n

I went down the list and found about a third of them in other sources, but these were just vaguely related to the subject I was researching. It rather seems as if ChatGPT fills in any gaps in the research field with plausible, and very real-looking references. With its access to big data sets it can quickly add plausible authors and co-authors that work in the right field, a title that fits the research question and choose a journal (along with edition and page numbers) where the paper is “published”. It has done so when asked for the most cited economic paper. It also seems to vary when it feels the need to “fill in the gaps”. And as AI doesn’t have access to any real-time sources it cannot itself verify that they are in fact, real. But it will claim that they are.

\n\n

Letting AI explain

\n\n

Others have dug deeper into this subject if you’re interested on reading more, but I decided to also ask ChatGPT to explain its behavior: As an AI language model, I have access to a vast database of information, including academic papers, journals, and other sources. However, sometimes, the information that I have is insufficient or outdated, or there may not be a scientific reference available to support a particular statement or claim. In such cases, I use my natural language processing capabilities to create a plausible reference that fits the context. Very helpful. But a tad too helpful if you want to back up your claim with science. But we can let this be a good lesson for us: even if AI does the work for us so well, we can never stop using our critical thinking, check facts and verify the information we get out of it. The need for human scrutiny is still strong, both when using AI to search for references and when reading a well-written text backed up by a long, serious reference list. Check the references: do they exist? Do they say what the author claims?

\n\n

So, where did my source criticism conversation with AI bring me? After I pointed out that 70 % of the reference list was false, ChatGPT apologized, explained that mistakes can happen, and immediately generated three new sources that maybe could be of better help.

\n\n

All three were fake. Drop curtain.

\n\n

Hanna Rönnqvist
Content Developer Junglemap

\n\n

This article has also been published on LinkedIn

\n"},{"__typename":"InsightRecord","slug":"ai-puts-focus-on-the-human-element-in-cybersecurity","title":"AI puts focus on the human element in cybersecurity","image":{"url":"https://www.datocms-assets.com/64114/1679927179-banner-ai-webinar.png?fm=webp","alt":"Banner for Junglemap AI webinar","__typename":"FileField"},"text":"

Using AI, threat actors can scale, automate and make their attacks even more sophisticated. At the same time, more and more cybersecurity efforts also rely on AI. This ‘escalating AI-war’” leads to more focus on human judgment and the ability to be accountable in a digitalized work environment. Offering affordable awareness training over time becomes one of the best solutions for any organization. These are some of the key findings in the Junglemap webinar 'How does AI impact cybersecurity?'

\n","_modelApiKey":"insight","_publishedAt":"2023-10-10T14:33:49+02:00","contentText":"

Patrick Couch, business developer at silo.ai, one of Europe’s leading private AI labs, and with 10+ years as AI spokesperson for IBM is very clear: The AI arms race makes the human firewalls even more important.
- With all the recent breakthroughs, it becomes almost impossible to tell the differences between human and artificial intelligence in terms of incoming digital messages. That’s why we need to train our abilities to put things into context and control our immediate impulses.

\n\n

Joakim Hvalby agrees. With a background from cybersecurity training in the Norwegian finance group DNB and now content lead for the Junglemap flagship courses on information security awareness, he sees the need to keep holding us humans accountable.
- We can’t let our guards down and think that AI will solve the problems for us. With AI in play this becomes even more important.

\n\n

When it comes to the implications for awareness training, Joakim Hvalby sees a continuous need to keep beating the forgetting curve by offering learning “in a steady flow”.
- AI will increase the threats and attacks. We need to be even more vigilant.

\n\n

Ann-Therese Enarsson, CEO at Futurion, a think tank focusing on the future of work, how AI impacts the labor market is constantly on their radar. She sees AI and apps like ChatGPT as a ‘colleague that never sleeps’, and just one example how AI fundamentally changes the way we work.
- We need to meet AI with more HI, human intelligence, she says. It’s kind of a paradox, but with more AI in our work environment, we need to focus more on the specific human skills such as understanding context and knowing your audience.

\n\n

AI in cybersecurity has been coined a double agent. With the same techniques used both by threat actors as well as in cybersecurity systems. When asking OpenAI about the cybersecurity impacts of AI this list is being presented:

\n\n

Pros of AI in Cybersecurity:

\n\n

Automation: AI can automate cybersecurity processes such as threat detection and response, reducing the need for human intervention, and allowing for faster detection and remediation of security incidents.
Detection: AI can detect potential threats that may go unnoticed by traditional security tools. It can analyze large volumes of data from various sources in real-time, providing more accurate and timely threat detection.
Prediction: AI can predict potential threats before they happen, allowing organizations to take proactive measures to prevent them.
Learning: AI can learn and adapt to new threats and attack patterns, allowing for better and more effective threat detection and response.
Efficiency: AI can improve the efficiency of cybersecurity operations by reducing false positives and minimizing the time and effort required to investigate and remediate security incidents.

\n\n

Cons of AI in Cybersecurity:

\n\n

Complexity: The use of AI in cybersecurity can add complexity to security operations, requiring additional training and expertise.
Dependence: Organizations may become overly dependent on AI for security, potentially neglecting other important security measures such as human oversight and basic cybersecurity hygiene practices.
False alarms: AI can generate false positives, which can lead to wasted time and resources investigating non-existent threats.
Vulnerability: AI systems themselves can be vulnerable to cyberattacks, and if compromised, they can become a tool for attackers to carry out their attacks.
Ethics: The use of AI in cybersecurity raises ethical concerns around privacy, data protection, and human rights. There is a risk that AI may be used to carry out cyberattacks or to violate the privacy and rights of individuals.

\n\n

Patrick Couch agrees with ChatGPT on these parameters, but also highlights that pros also can be cons – depending on who the user is. AI being a double-edged sword, once again puts focus on us humans. We can’t become too reliant on AI. Instead, we need to rely on the two things that create learning: experience and education. If AI can compose an email from your grandmother with specific and delicate information about you, maybe the right question to ask is if your grandmother would write this in an email in the first place?
- This is a game we can’t win. We simply need to embrace new habits, and I think that NanoLearning is very good way to create these.

\n\n

Will AI bring inclusion or division?

\n\n

Futurion publishes a yearly Future proof index, and the latest figures show that an increasing part of the Swedish work force doesn’t feel that they are attractive on the labor market. ‘Sweden needs to step up’ says Ann-Therese Enarsson. She also puts out a warning that the AI we have today is mainly built upon data from North America and Europe.
- Three billion people are not on the internet today, she says. With AI playing a bigger role, this can mean that we see an even greater polarization in the near future.

\n\n

Both Patrick Couch and Joakim Hvalby agree and see cybersecurity implications based on this. People who feel left out and don’t understand, tend not to participate. This goes for cybersecurity as well as for politics.
- If you don’t participate and take part in your organization’s cybersecurity, you easily become a security risk, says Patrick Couch.

\n\n

Junglemap offers awareness training to both large and small organizations, and Joakim Hvalby also sees a risk for SME:s – and for the whole economy. With more sophisticated AI in place, this might also be more expensive and a challenge for all SMEs.
- Offering affordable and accessible awareness training for all, is something that can contribute to more inclusive and secure organizations.

\n\n

With AI rapidly being implemented into a lot of software applications, individual integrity becomes even more important. When AI is still relying on data input from user behavior, all organizations need to strike a balance between AI-efficiency and human integrity.
- This balance needs to be in focus, says Joakim Hvalby. Now and going forward.

\n\n

Watch the webinar 'How does AI impact cybersecurity?' here:

\n"},{"__typename":"InsightRecord","slug":"happy-customers-are-key","title":"Gustav Berghog in Saas B2B CEO podcast: \"Happy customers are key\"","image":{"url":"https://www.datocms-assets.com/64114/1692787988-b2b-podcast-player-icon.png?fm=webp","alt":"Podcastplayer for B2B SaaS CEO's showing Gustav Berghog episode","__typename":"FileField"},"text":"

Junglemap CEO Gustav Berghog gives his best tips on how to keep customers happy, attract new ones, and find a good Go To Market strategy. NanoLearning is not about putting a check in a box. It's about changing peoples understanding and behaviours long term.

\n","_modelApiKey":"insight","_publishedAt":"2023-10-11T12:25:12+02:00","contentText":"

The top KPI:s in managing a scale up like Junglemap is to focus on that your customers actually use your services. Customers level of activity is something that Gustav Berghog and junglemap follow closely.

This is one of the tips that Gustav Berghog shares in the B2B SaaS CEOs podcast with Josef Fallesen. The conversation in the episode also covers the best Go To Market strategies, lessons learned from a growth journey as well as challenges and best practice when it comes to leadership.

Listen to the whole Episode on Spotify here.

\n\n

\n"},{"__typename":"InsightRecord","slug":"the-response-to-nanolearning-is-very-positive","title":"”The response to NanoLearning is very positive”","image":{"url":"https://www.datocms-assets.com/64114/1665047658-56957-orthex_bins_lifestyle-screen.jpg?fm=webp","alt":"Two plastic buckets. One filled with red apples, one with top cover.","__typename":"FileField"},"text":"

When Orthex sends out phishing tests to its employees, and they click on the wrong links, it provokes reactions on several levels. First, excuses about too much stress. And then - talks around the water fountain and at meetings. Just the effect needed to increase awareness of information security. - The response is very positive because everyone fundamentally understands that we take security seriously, says Tina Guldstrand, responsible IT project manager at Orthex.

\n","_modelApiKey":"insight","_publishedAt":"2023-10-11T12:26:44+02:00","contentText":"

The Orthex Group, one of Europe's largest manufacturers of plastic products, started with NanoLearning from Junglemap with the introduction of Office365 and GDPR back in 2017 and has continued ever since. With a consistent and even distribution rate, they annually conduct courses in both information security and GDPR. And the response, as said, is positive.

\n\n

- 99% of our users are very positive, says Tina Guldstrand. They appreciate the continuity, that the lessons are short and the design of the learning.

\n\n

Being the person responsible for the courses, Tina Guldstrand also greatly benefits from the courses' questionnaires as an important part of the follow-up. Using the survey results as a basis, she collaborates with the Junglemap's Customer Success Manager to create conditions for the best effect.
- Basically, I can just say \"I want this\" and I get that help. The technical support function has also improved with support in short video meetings to facilitate communication. I am simply super satisfied, says Tina Guldstrand.

\n\n

Different target groups

\n\n

For Orthex, it is no problem to distribute NanoLearning to offices in different countries and in different languages. The challenge with any type of communication and learning is to reach all target groups. About 100 of the company's 300 employees work in production and also work in shifts. Without your personal computers or e-mail addresses linked to work, it is difficult to get there.

\n\n

Instead, Orthex has chosen to produce Powerpoint presentations based on the NanoLearning courses, which the production managers then go through on-site. Here, Tina Guldstrand sees opportunities for improvement, even if the physical environment and the design of the work is a practical challenge.

\n\n

Orthex also sees an advantage with the so-called STAR model, where participants who stop, think, ask questions and react - are also rewarded with a small digital gold star.
- That's how we humans work, notes Tina Guldstrand. We like to get some attention when we've done something good and we notice that our employees are no exception.

\n"},{"__typename":"InsightRecord","slug":"nanolearning-reminds-our-employees-of-what-they-already-know","title":"”NanoLearning reminds our employees of what they already know.”","image":{"url":"https://www.datocms-assets.com/64114/1663922399-vikingline_ferry.jpeg?fm=webp","alt":"Viking Line ferry on water","__typename":"FileField"},"text":"

At Viking Line, leading cruise and vessel operator, IT security training is mandatory. Initially, NanoLearning from Junglemap was only aimed at employees on land, but the staff on board wanted to take part in the training as well. - Our employees like that NanoLearning reminds them of things they already know, says Alexander Östergård, Head of IT-Infrastructure & Security at Viking Line.

\n","_modelApiKey":"insight","_publishedAt":"2023-10-11T12:27:56+02:00","contentText":"

About 200 people work on board a ferry from Viking Line, and of those about 30–40 people have access to their own computers. But all employees come into contact with the company's IT environment in one way or another. This makes it important to give everyone access to courses in information security. The requests for NanoLearning from Junglemap also on board, actually come from the employees.
- Many of the staff on board have previously taken part in NanoLearning when they worked in projects ashore and then wondered why they and we are not allowed to take part in that training on board, says Alexander Östergård.

\n\n

Today, NanoLearning in information security is also available on board - on computers shared by several people. This means that more people can do the lessons, even if it becomes more difficult to follow up who has done the course.

\n\n

Celebrate mistakes

\n\n

Many of the staff describe the effect as \"being reminded of things they already know\". In a way, the very essence of NanoLearning as a method to increase awareness over time.

\n\n

On days when NanoLearning lessons are distributed, Alexander Östergård says he can hear people say that \"today I was a real star\" out in the corridors. One of the many proofs that the so-called STAR model - to Stop, Think, Ask and Report - is actually beginning to settle in the organizational behaviour.

\n\n

Right now, Viking Line is anticipating the results of a longer anti-phishing campaign and there are already clear signs of what triggers people to click on incorrect links. At the same time, there are clear signals in the company's case management system that the amount of cases dealing with suspicious emails and incorrect links is increasing. This, too, is a tangible sign that awareness is increasing and that employees are learning to be restrictive.

\n\n

At the same time, creating a safety culture is a balancing act. There are employees who are provoked by receiving Phishing emails from their own organization, but at the same time it leads to good and important discussions.
- Actually, we want to give gold stars to those who make mistakes, says Alexander Östergård. Acknowledging and communicating that something has gone wrong is an important part of a functioning safety work.

\n\n

IT threats still remain

\n\n

Looking ahead, it feels natural for Viking Line to continue with Junglemap's information security courses. Both the IT environment and the cyber threats will remain and the collaboration with Junglemap works well. Everything from support in setting up course plans from the Customer Success Manager to the AD connection that makes it easy for new employees to enter what Alexander Östergård calls the \"NanoLearning loop\".

\n\n

In addition, the opportunity to create the training courses and make simple adaptations in the company's four different languages is an advantage in itself. Another bonus is that many employees testify that they also become more vigilant and aware in private.
- People really become 'IT-wiser' at home, notes Alexander Östergård, which also strengthens the company's IT security.

\n"},{"__typename":"InsightRecord","slug":"300-new-customers-and-1200-deals-in-2022","title":"300 new customers and 1200 deals in 2022. Junglemap reaches new milestone with over 7 million all-time users.","image":{"url":"https://www.datocms-assets.com/64114/1648718833-junglemap_gustav.jpg?fm=webp","alt":"Portrait of CEO Gustav Berghog","__typename":"FileField"},"text":"

Junglemap can look back at a strong 2022 with over 300 new customers and 1200 deals. At the same time, a historic milestone was passed when Junglemap reached over 7 million all time NanoLearning-users. - We did very well last year and will build on this as we prepare for 2023 and beyond, says Gustav Berghog, CEO of Junglemap.

\n","_modelApiKey":"insight","_publishedAt":"2023-10-11T12:31:51+02:00","contentText":"

Marked by the war in Ukraine, increased energy prices, rapidly increasing inflation with sharply increased interest rates, 2022 was a very turbulent and difficult year. Which also led to many industries witnessing an increased number of bankruptcies, large losses and gloomier forecasts. But despite tougher times, 2022 was another strong year for Junglemap with 300 new customers and 1200 deals. At the same time, a historic milestone was passed when the number of users of Junglemap's unique NanoLearning method exceeded 7 million since its inception in 2006.
- Although last year was challenging in many ways, we see an increased focus on information security awareness training and a continued great interest in NanoLearning as a method, says Gustav Berghog, CEO of Junglemap.

\n\n

Junglemap's growth strategy, which was adopted in 2021, with a continued focus on existing and new customers in Scandinavia, as well as continued expansion in Benelux and Finland, will still guide the company going forward. Going into 2023, Junglemap has chosen to change the balance between growth and profitability with more focus on the latter. In connection with this, Junglemap implements some organizational changes to create a more efficient organization.
- Just like everyone else, we see that we are entering tougher and more uncertain times, notes Gustav Berghog. With the necessary steps we’re taking now, we will be better equipped to achieve our goals by 2023.

\n"},{"__typename":"InsightRecord","slug":"the-phishing-tests-really-pay-off","title":"”The phishing tests really pay off”","image":{"url":"https://www.datocms-assets.com/64114/1664435261-e-handelsplock-3.jpg?fm=webp","alt":"Staff in ICA grocery store packing bags","__typename":"FileField"},"text":"

As Junglemap's first customer outside of Norway, ICA, Swedens leading chain of grocery stores, started using Junglemap's information security awarness courses over 10 years ago. There was a need to strengthen digital security, and the concept of NanoLearning was appealing. - Our employees don't have to plan anything in their calendars and the training takes place throughout the year, says Stephanie Ternert, Information Security Specialist at ICA.

\n","_modelApiKey":"insight","_publishedAt":"2023-10-11T12:33:34+02:00","contentText":"

In parallel with NanoLearning from Junglemap, ICA uses a digital platform where they gather most of their other trainings. A good example of how to combine NanoLearning with other forms of education.
- We started with Junglemap's courses in information security, but pretty soon other parts of the business started using NanoLearning, says Stephanie Ternert. Today, we have over ten different courses in NanoLearning.

\n\n

Phishing tests important

\n\n

Stephanie Ternert works with the courses in IT and Information security and praises the phishing functionality included in Junglemap's package. Phishing tests are now carried out 2–3 times a year and the results point to a steadily increased awareness. The frequency is based on a combination of own research and recommendations from Junglemap's Customer Success Manager. But also on the organizational timing.
- Of course we take workload and other ongoing business processes into account in the planning. But the practical exercise is very good and gives effect, says Stephanie Ternert.

\n\n

The ability to customize the layout of the phishing tests which makes the tests look much more authentic, is another advantage that she wants to highlight. The results from the tests are communicated back to the relevant security officers and to the IT management. In addition, the effort is reinforced by intranet articles and calls to continue reporting suspected wrongdoing.
- It is important to adapt the feedback to the target group in order to reinforce the effects in the right way, notes Stephanie Ternert.

\n\n

Development going forward

\n\n

She sees the fact that ICA has gone from using NanoLearning in information security and then started using the method for more things as something very positive and says that ICA is happy to be involved and contribute to the development going forward. For example, she sees further opportunities for improvement with the phishing tests.
- For example, it would be great if we could send phishing tests in several languages, she says.

\n"},{"__typename":"InsightRecord","slug":"nanolearning-keeps-your-knowledge-up-to-date","title":"”NanoLearning keeps your knowledge up to date”","image":{"url":"https://www.datocms-assets.com/64114/1663588668-maria_erik_color_730x400.jpeg?fm=webp","alt":"Woman instructing a man in front of computer screens in office.","__typename":"FileField"},"text":"

Insurance company PRI started with Junglemap's information security course, but quickly realized that NanoLearning can be used for so much more. Today, PRI runs recurring NanoLearning courses around several of the regulations that an insurance company needs to comply with. - We have a rolling annual plan that we review and update, says Anna Lunin, communications manager at PRI.

\n","_modelApiKey":"insight","_publishedAt":"2023-10-11T12:35:33+02:00","contentText":"

As head of communications, Anna Lunin knows what challenges there are in reaching out with information and training in compliance matters. An article on the intranet hardly makes any difference and gathering everyone for a training session often feels too cumbersome. When PRI tested Junglemap's standard course in information security, they saw that the method is an excellent fit for several of the regulations that employees at PRI need to know and know.

\n\n

Today, 4–5 recurring compliance-driven courses run in NanoLearning annually. In addition, PRI has used the method to communicate about everything from evacuation routines to writing rules and graphic profiles.
- It's a very good way to share knowledge, and above all to keep your knowledge alive and up to date, notes Anna Lunin.

\n\n

Most of the knowledge PRI shares via NanoLearning is also available on the organization's intranet. The NanoLearning gives an insight into what it is all about and often refers to the intranet to read more if necessary. For those who need to have access to knowledge at a given time, it is more natural to search on the intranet.

\n\n

Internal working group does the work

\n\n

PRI now has an internal working group that reviews and plans the various NanoLearning efforts. Two people handle the actual adaptation and publication in the platform, and experts from different units add updated content.

\n\n

In cases where NanoLearning is included as part of PRI's compliance, the person responsible for reporting gets access to statistics on the implementation. However, they have not yet added any types of effect measurements to the courses.
- It's something we can definitely improve and look at going forward, says Anna Lunin.

\n\n

Several courses in parallel

\n\n

At the same time that PRI conducts its own NanoLearning courses, they continue with an adapted version of Junglemap's standard course in information security. The 19 lessons that the course contains can be experienced as comprehensive and the first idea was to roll out the lessons twice a week, and then start other training courses.
- But in dialogue with our CSM at Junglemap, we came to the conclusion that it is better to run two courses at the same time than to \"run everything at once\", notes Anna Lunin. It's about creating awareness - and that needs time.

\n"},{"__typename":"InsightRecord","slug":"junglemap-talks-with-anna-tebelius-bodin-educator-and-speaker","title":"Junglemap Talks with Anna Tebelius Bodin, educator and speaker","image":null,"text":"

Consuming information is not learning. Anna Tebelius Bodin, educator and speaker with over a thousand talks on learning and how our brains work, is very clear.

\n","_modelApiKey":"insight","_publishedAt":"2022-11-16T14:01:59+01:00","contentText":"

“Consuming information is just an illusion of learning”

\n\n

Consuming information is not learning. Anna Tebelius Bodin, educator and speaker with over a thousand talks on learning and how our brains work, is very clear. The problem is that information consumption might feel like learning, but actual learning require that we pay attention and keep our focus.

\n\n

Our brains need to digest a lot of information, and only a very small percentage of all that information actually stays in our long-term memory. In the age of information overload, many of us make the mistake and think that just listen to a podcast or a talk is the same thing as learning.

\n\n

But it isn’t. We need to pay attention in order to learn. It’s not enough to hear something - you need to listen. It’s not enough to decode text. You need to understand what you are reading. Otherwise, it’s just gives you an illusion of learning.

\n\n

During her talks and workshops Anna Tebelius Bodin, sometimes give her audience short tests on what she has just been talking about. And this comes as a real eye opener for most people. Most of us overestimate how much we learn by just listening. It’s when we have to express ourselves, we realize what we actually know. Or don’t know.

\n"},{"__typename":"InsightRecord","slug":"holidays-and-safety-risks-how-to-stay-safe","title":"Holidays and safety risks - how to stay safe ","image":{"url":"https://www.datocms-assets.com/64114/1670489242-christmas-santa-claus-nicholas-hands.jpeg?fm=webp","alt":null,"__typename":"FileField"},"text":"

The end of December is almost the perfect storm for all types of cybercrime: The combination of increased stress when "Q4 is about to end", while both employees and management bring the company's IT environment home during the holidays, poses a security risk. To combat this, it is important to think about IT and information security, says Joakim Hvalby, program manager information security in Junglemap.

\n","_modelApiKey":"insight","_publishedAt":"2023-10-11T12:37:51+02:00","contentText":"

The number of cyber-attacks increases over the holidays. Findings from security company Darktrace suggest an average increase of 30 percent in recent years. A combination of holiday stress and employees taking time off from work makes businesses and organizations more vulnerable. Therefore, we need to think about IT and information security. It's especially important to think about how your company's IT environment is managed and to have clear guidelines for remote work on weekends.

\n\n

When it comes to the company's own IT environment, it is first and foremost important that the company's IT department is staffed at the same level as the rest of the year, if not more, given the increased volume of attacks. The number of cases reported to the help desk can be reduced, but all operating systems still need to be monitored. System updates always pose a high risk and should be postponed until operations are back to normal, if possible, unless there is a critical update.

\n\n

It is also important to keep the focus on organizations' awareness of information security. A safety culture where all employees stop, think, ask and react, reporting things that seem suspicious is necessary all year round. But not least before a holiday like 2022, when many will combine time off and work remotely.

\n\n

Connected homes – increased business risk

\n\n

Our homes are becoming increasingly connected. More and more so-called smart products are filling our homes and helping to make everyday life easier, but at the same time they create new security risks. Although this year's gift may be something knitted, there will surely be many hard gifts with lots of technology under the tree. Many times, the smart products only have a default password, and automatic software updates are missing, making these an easy catch for hackers.

\n\n

Therefore, a well-thought-out security strategy should also include tips and advice on how to think about your own cybersecurity at home. As for the gifts, it can be anything from checking the extent of the manufacturer's software updates and setting up automatic updates on connected devices, to changing all preset passwords so that they are unique and difficult to crack. That the internet at home is delivered via a router that has built-in security function that protects all devices, an updated security program and firewall, is something that becomes important both for the employees privately and for all home offices. Basically, of course, it's also about not connecting things unnecessarily. If there is no concrete need, it is better to leave things offline.

\n\n

We help companies and organizations create awareness of information security all year round. We do not recommend our customers to take breaks in security work during the holidays. The combination of \"Q4 stress\" and \"staff’s need for vacation\" is not an argument for taking safety lightly. Quite the opposite. Because cybercrime doesn't take vacations, neither can security.

\n"},{"__typename":"InsightRecord","slug":"joakim-hvalby-the-four-most-common-challenges-with-gdpr","title":"Joakim Hvalby: \"The four most common challenges with GDPR\"","image":{"url":"https://www.datocms-assets.com/64114/1670848569-joakim_hvalby_gdpr-jpg.heic?fm=webp","alt":null,"__typename":"FileField"},"text":"

The General Data Protection Regulation (GDPR) was introduced in 2018, but still, not all organizations comply with it. Confidentiality and a functioning privacy protection regime are no longer "good to have" but an organizational, strategic and operational necessity. Says Joakim Hvalby, Program Manager Information Security at Junglemap, pinpointing the four most common challenges to deal with.

\n","_modelApiKey":"insight","_publishedAt":"2023-12-05T15:20:26+01:00","contentText":"

Why are privacy issues important?

\n\n

- as with information security, all types of organizations need both a technical perspective and conscious employees to ensure functioning protection of data. How an organization handles privacy issues today affects both reputation, competitiveness and customer satisfaction. Therefore, privacy should be an inherent part of technical interfaces, marketing, budgets and digitization projects. Yes, how the entire organization thinks, acts and communicates. This applies as much to public as private actors.

\n\n

What is the most important thing to consider when it comes to good processes for gdpr and privacy protection?

\n\n

- it's basically about making sure that data integrity issues are a natural part of all projects. We see that many of junglemap's customers face different types of challenges.

\n\n

Fortunately, there are some good guidelines to have in mind making this work more manageable:

\n\n

1. Dont collect more data than necessary

\n\n

- Do we need all this data to solve the task? Dont collect more data than is necessary to solve the task.

\n\n

2. Keep marketing within agreed limits this is an exciting product.

\n\n

- Let's send out information about this to all previous customers! Make sure to only use the data according to the permissions given from the user.

\n\n

3. Don't store data longer than necessary so much data!

\n\n

- Have good deletion routines so that data isnt stored longer than needed.

\n\n

4. Have good routines for processing physical information so much clutter on the desk!

\n\n

- Remember that privacy also applies to physical documents.

\n\n

We have now launched the 2024 version of Privacy and GDPR for all employees. A brand new course with updated content over fewer lessons, but with more interactive touch points giving your organisation's DPO a better understanding of the level of your organisations' awareness.

\n\n

To increase engagement and awareness, this new course also focuses on why GDPR and privacy is important both at work – and in your private life.

\n\n

\n"},{"__typename":"InsightRecord","slug":"don-t-collect-more-data-than-necessary","title":"GDPR tip 1: Don't collect more data than necessary ","image":{"url":"https://www.datocms-assets.com/64114/1670404229-electrical-data-center-complete-sets-of-cabinet.jpeg?fm=webp","alt":"A big server hall with numerous data servers","__typename":"FileField"},"text":"

Do we need all this data to do what we want to do? The fact that GDPR was introduced in 2018 doesn’t mean that all organizations comply with it. An important part of GDPR is not collecting more data than necessary, says Joakim Hvalby, Program Manager Information Security at Junglemap, in one of four tips articles about GDPR.

\n","_modelApiKey":"insight","_publishedAt":"2023-12-08T08:58:24+01:00","contentText":"

The guidelines from the responsible authorities are clear: Personal data processed or stored should be \"adequate, relevant and not too extensive in relation to the purpose\". In plain language, this means that we should never process or store more personal data than is needed.

At the same time, there’s a lot of focus on data-driven development and innovation. And it's not that strange. Properly utilized, we can benefit greatly from analyzing user data to get a better understanding of how our employees, members or residents use our services. But the personal data processed must be clearly linked to the purpose. In other words, it’s not allowed to collect personal data for indeterminate future needs, because they may be \"good to have\". Or because it's possible. We have to limit ourselves.

IMY, the Swedish Authority for Privacy Protection lists six steps to get a handle on GDPR and the first two steps are important to take on board in this perspective:

Step 1: First think about what you need to do and why
What personal data do you need to use? Why and in what way? Have you planned to do several different things with personal data? Are there any personal data that you don’t want to directly handle but still receive? Deciding on these things before starting actually introducing data into the process, will help limit the data used.

Step 2: Determine purpose before you begin
GDPR requires that you clearly determine the purposes before the processing begins, and that you then only process the personal data for those purposes. It’s called purpose limitation. And again only use the personal data you need. It isn’t allowed to process more personal data than is needed for the purposes you have decided. This is called data minimization and is one of the fundamental principles of the GDPR. Each purpose must also be described specifically and concretely. After five years with GDPR, this is something that we really should know. But often still forget.

\n\n

To increase engagement and awareness, this new course also focuses on why GDPR and privacy is important both at work – and in your private life.

\n"},{"__typename":"InsightRecord","slug":"keep-marketing-within-agreed-limits","title":"GDPR tip 2: Keep marketing within agreed limits ","image":{"url":"https://www.datocms-assets.com/64114/1670404658-achievement-agreement-arms-business-agreement.jpeg?fm=webp","alt":"Handshaking between a man and a woman in office","__typename":"FileField"},"text":"

The fact that GDPR was introduced in 2018 doesn’t mean that all organizations comply with it. A common mistake is that many organizations a bit into a project, or at the launch of a new product, come to the conclusion that it would be good to reach out with new information. We must always make sure to use the data within the limits for which we have obtained permission. And to be clear when the limits are set up. Joakim Hvalby, Program Manager Information Security at Junglemap writes in one of four articles with tips regarding GDPR.

\n","_modelApiKey":"insight","_publishedAt":"2023-12-08T08:58:49+01:00","contentText":"

\"This is an exciting product. Let's send out information about this to all previous customers!\" A spirited marketing idea that many of us probably recognize.

\n\n

But the guidelines of the responsible authorities are clear: Personal data may only be collected for \"specific, explicit and legitimate purposes\". This means that in each project we need to be clear about why, to what and for how long we should process personal data.

\n\n

In addition, the objectives must be specific and concrete, not vague or unclear. It’s not enough that the aim is solely to \"improve the user experience\", \"cyber security\" or \"future research\". It’s too broadly expressed, and the data subjects cannot assess what such personal data processing may entail. It’s also not enough to specify \"controls\" as the purpose of logging and monitoring, but also to indicate the purpose of the control.

\n\n

The purpose must also be justified. This means that the processing of personal data must have a legal basis in the General Data Protection Regulation and must be carried out in accordance with other applicable legislation and general legal principles.

\n\n

Process collected personal data in new ways?

\n\n

Of course, it’s difficult to think of all possible scenarios at the beginning of a project where personal data is collected. Often, needs appear that were difficult to predict.

\n\n

If the new needs fit within the original purposes, it’s sufficient to inform the data subjects about the new personal data processing before it begins.

\n\n

If, on the other hand, it’s a question of using the personal data in a new way, a new consent to personal data processing has to be given. Then we have to start from scratch and find a legal basis for the processing of personal data, making sure that it takes place in accordance with the basic principles and so on...

\n\n

To increase engagement and awareness, this new course also focuses on why GDPR and privacy is important both at work – and in your private life.

\n"},{"__typename":"InsightRecord","slug":"don-t-store-data-longer-than-necessary","title":"GDPR tip 3: Don't store data longer than necessary","image":{"url":"https://www.datocms-assets.com/64114/1670404771-analogue-antique-audio-cassette.jpeg?fm=webp","alt":"Vintage casett tapes in differens colours","__typename":"FileField"},"text":"

Not all organizations comply with GDPR. Like, for example, not storing data longer than necessary. A first step is to have good deletion routines so that data is not stored longer than needed. Joakim Hvalby, Program Manager Information Security at Junglemap writes in one of four articles with tips regarding GDPR.

\n","_modelApiKey":"insight","_publishedAt":"2023-12-05T15:21:42+01:00","contentText":"

The problem for most organizations is not the lack of data; Rather, too much unsorted data that really should have been deleted a long time ago. But as more and more organizations move to cloud-based data storage, there’s no longer a lack of capacity – and then there are many who do not prioritize their erasure routines.

\n\n

The guidelines of the responsible authorities are clear: Personal data may be stored for as long as needed for the purpose of the processing of personal data to be fulfilled. When the personal data is no longer needed for the purpose, it must be deleted or de-identified (obscured). This is a typical example of organizational tasks, related to risk, not being prioritized. Therefore, it’s a good idea to introduce routines for deletion of personal data.

\n\n

Personal data that must be saved

\n\n

Routines for the deletion of personal data don’t mean that everything should be deleted right away. In some cases, documents containing personal data need to be kept longer. This applies, for example, to accounting, where the Accounting Act imposes other requirements on how long certain documents are to be stored. But here too routines are needed. A good tip may be to store the documents in such a way that they are no longer available in day-to-day operations, that is, segregate the personal data by separating the documents.

\n\n

To increase engagement and awareness, this new course also focuses on why GDPR and privacy is important both at work – and in your private life.

\n"},{"__typename":"InsightRecord","slug":"gdpr-procedures-even-for-information-on-paper","title":"GDPR tip 4: Have GDPR procedures in place, even for information on paper ","image":{"url":"https://www.datocms-assets.com/64114/1670405064-archive-bookcase-boxes-business.jpeg?fm=webp","alt":null,"__typename":"FileField"},"text":"

Although most of the GDPR revolves around our digital handling of data, privacy protection also applies to physical documents. Therefore, it is important to have good routines there as well. Joakim Hvalby, Program Manager Information Security at Junglemap writes in one of four articles with tips regarding GDPR.

\n","_modelApiKey":"insight","_publishedAt":"2023-12-08T08:59:40+01:00","contentText":"

Although digitalization has moved quickly, we have not yet introduced the completely paperless office. And while digital threats are high on an organization's agenda, it's a mistake to assume that paper-based security risks no longer exist. According to Data security incident trends, as many as seven percent of security incidents have to do with \"loss/theft of paperwork or data left in unsecure locations\".

\n\n

One of the concerns related to GDPR and the Data Protection Act is that all personal data must be processed in accordance with the law, which means that we must be able to track and document it – to know what, where, when and how they are used. The Data Protection Act is technology neutral, which means that it also applies to personal data that only exists physically on paper.

\n\n

Since all organizations today place high demands on searchability also in written physical information that is handled, it’s wise to consider GDPR and privacy protection already when the system for handling physical information is set up.

\n\n

It's basically about three things

\n\n

Raising awareness about handling of personal data.
Easy management of data.
Compliance. All year round.

\n\n

To increase engagement and awareness, this new course also focuses on why GDPR and privacy is important both at work – and in your private life.

\n"},{"__typename":"InsightRecord","slug":"four-keys-to-increased-information-security","title":"Joakim Hvalby: “Four keys to increased information security”","image":{"url":"https://www.datocms-assets.com/64114/1668069910-joakim_hvalby.webp?fm=webp","alt":"Portrait of Joakim Hvalby, male in his 30's, outside on balcony","__typename":"FileField"},"text":"

Since the start 15 years ago, over 53 million lessons have been completed in Junglemap's NanoLearning courses in Information Security. Now the 2023 version is ready to start using. Joakim Hvalby, Program Manager Information Security at Junglemap, is one of the people behind the new course.

\n","_modelApiKey":"insight","_publishedAt":"2023-10-11T12:48:20+02:00","contentText":"

What are the keys to increasing information security within an organization?
- A functioning interaction between people and technology. All organizations must invest in both technical and human firewalls.

\n\n

It basically comes down to four things:

\n\n

Build a culture of openness. Sharing is caring!
A working safety culture is based on openness within the organization. An understanding that it is good to both acknowledge and report errors and deviations.
Fight human impulses. Strengthen your STAR behavior!
As much as 9/10 Phishing attacks succeed because we humans don't stop and think. Junglemap's courses in information security are about strengthening what we call STAR behavior - Stop, Think, Ask, React.
Always use multi-factor authentication. Technical security is needed!
If your password is revealed, you will not be able to log in without this being confirmed with an additional factor, such as a physical code generator or an application on the mobile. NOTE: Never confirm a login request unless you have initiated it yourself. If you receive an unknown request, change the password and contact your provider.
Use strong passwords.
Weak passwords are still the weakest link in security efforts. As much as 72% of phishing attacks aim to steal passwords. Use a password manager that can create a variety of strong passwords and store them securely for you.

\n\n

What are the benefits of NanoLearning?
- NanoLearning is about creating awareness all year round. Security is not something you have just because the technology is in place. It's ultimately about what your employees do. With our Information Security Awareness courses, we can overcome the forgetting curve and thus increase security.

\n\n

\n"},{"__typename":"InsightRecord","slug":"build-a-security-culture-of-openness-sharing-is-caring","title":"Build a security culture of openness. Sharing is caring!","image":{"url":"https://www.datocms-assets.com/64114/1671006316-isa23-sharing.jpeg?fm=webp","alt":null,"__typename":"FileField"},"text":"

A safety culture that really works, needs to be based on openness within the organization; an understanding that it’s good to both acknowledge and report errors and deviations. This is one of the key success factors for increased information security. Joakim Hvalby writes, Program Manager Information Security in Junglemap.

\n","_modelApiKey":"insight","_publishedAt":"2023-10-11T12:49:22+02:00","contentText":"

Information security is no longer an IT issue. It is essentially a strategic issue for organizational management. More and more organizations understand that various types of cyber-attacks pose a serious threat to the entire business. According to a study by KPMG, 18 percent of global business leaders state that cybercrime is the biggest threat to their profitability and growth in the coming years. An increase from 10 percent since last year.

\n\n

The safety culture is crucial

\n\n

Recognizing that an issue is strategic is one thing. Knowing how to manage it long-term, another. And there are no 'quick fixes' here. Strengthening information security is basically about creating a functioning security culture built on openness.

\n\n

Most organizations go through the same stages in their security work:

\n\n

Denial
Many organizations are still in a type of denial, an attitude that \"as long as nothing happens, we don't need to do anything.\"
Reactive
Too many companies and organizations have realized that information security is important – once the accident has occurred. Incidents always lead to activity. But the reactive approach is not enough.
Systematic
We see that more and more of Junglemap's customers have information security as part of their management systems. It provides stability and increased opportunity to both act quickly and efficiently.
Proactive
When security-thinking becomes part of the organization's development work, you’ve come a long way. To ‘add security’ late in the process is never good. Security, that is already considered when new systems and working methods are set up, has a much better effect.
A part of our daily routines
Only when information security is part of every employee's everyday life. When IT security is at the core. A security culture with the possibility of increasing a company’s security level is in place.

\n\n

For an organization to have an opportunity to take these steps and create a functioning safety culture, a culture of openness is also required. An organizational culture that makes all employees feel encouraged to share errors and mistakes - even ones they have made themselves - and where those who report suspected errors and shortcomings are rewarded, not criticized, and questioned.

\n\n

Hidden statistics
Although we are constantly provided reports of the increased number of cyber-attacks, it’s just the tip of the iceberg. Most organizations that are exposed to e.g. ransomware choose not to communicate this, in an attempt not to damage their brand. There are studies indicating that only 10 percent of all cyber-attacks are actually being reported.

\n\n

I think it’s a big mistake. In the last year, we’ve seen several examples of organizations that have strengthened their brands through their openness. Both the Swedish retail company Coop, Kalix municipality and the Norwegian industrial company Norsk Hydro have all won appreciation and respect for their way of communicating what they have been through.

\n\n

What’s needed is a culture of openness both within organizations and between organizations. Within industries and across sector boundaries. Without a shared culture of openness, those of us who work for increased information security will never have a chance against cybercriminals - who, after all, are constantly sharing knowledge and experience.

\n\n

We are now launching the 2023 edition of Junglemap's Information Security Awareness course. Many of our customers have used this course continuously for many years. And the effects are clear: 93 percent of the participants say that they are more aware of security issues after taking the course, and many of our customers tell us that the number of questions to the IT department increases, that more employees report errors and things that seem suspicious.

\n\n

And that's exactly what NanoLearning is all about. Creating awareness - all year round. Security is not something you have just because the technology is in place. It's ultimately about what your employees do. With NanoLearning, we can both overcome the forgetting curve and contribute to a safety culture built on openness.

\n"},{"__typename":"InsightRecord","slug":"fight-human-impulses-strengthen-your-star-behavior","title":"Fight human impulses. Strengthen your STAR behavior!","image":{"url":"https://www.datocms-assets.com/64114/1671006575-isa23-impulse.jpeg?fm=webp","alt":null,"__typename":"FileField"},"text":"

As much as 8 out of 10 of all data breaches are caused by bad user behavior. Often because we don't stop and think. Counteracting human impulses is a very important part of building a strong security culture. STAR behavior is a key to succeeding in this effort, says Joakim Hvalby, Program Manager Information Security at Junglemap.

\n","_modelApiKey":"insight","_publishedAt":"2023-10-11T12:52:58+02:00","contentText":"

According to the Verizon 2022 Data Breach Investigations report, as much as 82 percent of all data breaches are partly due to our human behaviors and mistakes. And international security experts predict that cyber-attacks targeting us users are the type of cybercrime that will continue to increase in the coming years.

\n\n

This is a development that clearly shows how important it is that we place the end user and our human behaviors first when working with information security. Information security is not an IT issue. It's about creating a safety culture where all the organization's employees increase their awareness - and counteract their human impulses.

\n\n

Reinforce STAR behavior
We are now launching the 2023 version of Junglemap's Information Security Awareness course.

\n\n

It is fundamentally based on strengthening what we call STAR behavior:

\n\n

Stop – Don’t act on impulse.
Think - Assess the risk of the current situation.
Ask - a colleague or manager for advice.
React - Report incidents, risk factors, etc.

\n\n

The STAR model may seem obvious. But both growth and innovations across industries are driven by digitization based on the condition that we as end users shouldn’t need to understand or know how the IT-systems actually work. Only how to use them. \"All you need is a finger\" as someone put it.

\n\n

This means that the STAR model must lead to action. Every day. Year round. Because information security is nothing companies simply introduce. It is something that all employees do.

\n\n

NanoLearning as a method is about creating and maintaining this awareness - all year round. This is how we create a safety behavior where we stop, think, dare to ask and react when we see things that seem suspicious. This is how we change behavior in the long term - and counteract our human impulses.

\n"},{"__typename":"InsightRecord","slug":"reduce-the-risk-always-use-multi-factor-authentication","title":"Reduce the risk! Always use multi-factor authentication.","image":{"url":"https://www.datocms-assets.com/64114/1671006709-isa23-multifactor.jpeg?fm=webp","alt":null,"__typename":"FileField"},"text":"

We need to stop putting all our eggs in one basket. It’s all about risk reduction. Two or more factor authentication increases security and is one of the pillars of a functioning security work, says Joakim Hvalby, Program Manager Information Security at Junglemap.

\n","_modelApiKey":"insight","_publishedAt":"2023-10-11T12:54:35+02:00","contentText":"

Many cyber-attacks aim to gain access to our passwords and login details. It’s almost impossible to fully protect against it, but it is possible to significantly reduce the risk. Multi-factor authentication (MFA) is one of the most effective measures one can take securing one’s accounts and information. In order to succeed with a cyber-attack, an attacker will then need all the factors to log into an account. So, the more factors, the higher the security. A good move is to enable MFA where possible.

\n\n

The different factors of multi-factor authentication are often referred to as:

\n\n

- Something you know – for example, username or password.

\n\n

- Something you have – like a one-time code in an app or code generator.

\n\n

- Something you are – for example facial recognition.

\n\n

As MFA becomes more common, attackers are increasing their efforts to steal not only passwords, but also one-time codes. For example, they can impersonate a service you use and contact you with a fake authentication request.

\n\n

There are two simple steps to further minimize the risk of a data breach:

\n\n

Only accept MFA requests that you expect.

\n\n

Use an authenticator app or code generator when possible.

\n\n

The challenge is being able to persevere and be consistent - all year round. We’ve just launched the 2023 version of Junglemap's Information Security Awareness course, which aims to create and maintain an increased awareness over time.

\n\n

Because at the end of the day, that's what information security is all about. Security isn’t something you as a company have just because the technology is in place. It's ultimately about what your employees do. With NanoLearning, we overcome the forgetting curve and reduce the risks.

\n"},{"__typename":"InsightRecord","slug":"don-t-be-the-weakest-link-in-the-security-chain","title":"Don't be the weakest link in the security chain!","image":{"url":"https://www.datocms-assets.com/64114/1671006805-isa23-passwords.jpeg?fm=webp","alt":null,"__typename":"FileField"},"text":"

Password theft is one of the top four methods of data breach. As users we simply need to get better at using strong passwords. And with the right tools and techniques, it can be quite easy, says Joakim Hvalby, Program Manager Information Security at Junglemap.

\n","_modelApiKey":"insight","_publishedAt":"2023-10-11T12:55:36+02:00","contentText":"

As humans we have used passwords throughout the ages to get in through locked doors. Both physical and digital ones. But in today's digitized world, we are focused on making things easy for ourselves. We don't memorize things anymore. We create passwords that are easy to remember - which makes them easy to crack.

\n\n

There might be those who think that we security experts keep nagging on strong passwords. But we do have our reasons. The key take aways from the 2022 Annual Identity Exposure Report speak volumes:

\n\n

1.7 billion credentials were exploited by cybercriminals in 2021.

\n\n

70 percent of users were still using hacked passwords a year later.

\n\n

The most frequently reused password was \"password\" (!).

\n\n

60% of users reuse passwords. A Google survey found that 52% reuse passwords for multiple accounts.

\n\n

And only 20% of users have a password manager.

\n\n

Strong and unique passwords

\n\n

It's important to ensure that all passwords are strong and unique. There are three simple techniques for this:

\n\n

Use phrases of 16 characters or more and preferably include spaces, dialectal expressions, etc. Example: My bills are way too high! (don't reuse use this phrase).

\n\n

Never reuse the exact same passphrase and never share it with anyone else.

\n\n

Change your passphrase if you suspect it has gone astray.

\n\n

The fact that no more than one in five internet users uses some type of password manager is both alarming and strange to me. With a password manager, you only need to remember one – very strong and unique password phrase, because the software takes care of the rest.

\n\n

When it comes to the workplace IT environment, some type of password manager is an affordable and effective measure that most organizations should prioritize investing in. Fortunately, we're also seeing that it becomes more and more common. In the report Nordmenn og digital sikkerhetskultur, 21 percent state that they also use this privately.

\n\n

We have just launched the 2023 version of Junglemap's Information Security Awareness course. Basically, it's about increasing knowledge and maintaining awareness of information security - all year round. The way employees manage their passwords is something that IT departments and security managers are constantly struggling with.

\n\n

With the right tools for strong and unique passwords in place, it's a matter of getting everyone to do the right thing. When it comes to information security, it’s not in place just because the technology is installed. It's ultimately about what your employees do. Not least with their passwords.

\n"},{"__typename":"InsightRecord","slug":"reflection-is-what-creates-learning","title":"“Reflection is what creates learning” ","image":null,"text":"

We all learn in the same way. Matti Olofsson, expert on learning and CCO at Junglemap points out that learning is based on three R:s - repetition, reflection and reinforcement.

\n","_modelApiKey":"insight","_publishedAt":"2023-10-11T12:56:38+02:00","contentText":"

The first step in making learning happen is to acknowledge that it is a process. Not an event. Anna Tibelius Bodin, educator and speaker, emphasizes that work life learning can’t be separated from our everyday activities.

\n\n

People aren’t machines. We don’t need to be programmed with repeated information. We need time to reflect and to bring new knowledge into practice. There are different techniques for that. Matti Olofsson underlines the spacing effect as key. To allow new information to be reflected upon.

\n\n

And this requires that organizations stop treating learning as events and start looking at learning as a process. That they stop forcing their employees into the ‘corporate classroom’ once a year, and instead make learning an integrated part of everyone’s daily activities.

\n"},{"__typename":"InsightRecord","slug":"a-strong-first-half-of-2022-for-junglemap","title":"A strong first half of 2022 for Junglemap","image":{"url":"https://www.datocms-assets.com/64114/1648718833-junglemap_gustav.jpg?fm=webp","alt":"Portrait of CEO Gustav Berghog","__typename":"FileField"},"text":"

2021 was a record year for Junglemap with over 300 new customers. And the growth journey continues. During the first half of 2022, the number of new customers has increased by 35 percent compared with the record year 2021. - The figures clearly show how strong our offer is, says Gustav Berghog, Group CEO at Junglemap.

\n","_modelApiKey":"insight","_publishedAt":"2023-10-11T12:58:27+02:00","contentText":"

With a new brand identity, increased digital marketing, and not least with a 55 percent increase in the number of employees, Junglemap is investing heavily in reaching even more customers and new markets.
- We're in a rapid transformation phase, says Gustav Berghog. And we already see clear signs that our new organisation is delivering positive results.

\n\n

The number of new customers compared to the first half of the previous year has increased by 35 percent. An important part of the growth journey is the opening of a Junglemap office in Amsterdam in April and also a strengthened Scandinavian organisation.

\n\n

Junglemap offers NanoLearning. A groundbreaking method for learning and increased awareness over time. Especially in information security, but also in other areas.
- All organisations have major challenges both in terms of information security and ongoing re- and upskilling. We see a huge potential for NanoLearning going forward, says Gustav Berghog.

\n"},{"__typename":"InsightRecord","slug":"nanolearning-strengthens-work-with-childrens-rights","title":"NanoLearning strengthens work with children's rights","image":{"url":"https://www.datocms-assets.com/64114/1692797683-barnratt.png?fm=webp","alt":"small and lonely child in city environment in front of a grafitti wall","__typename":"FileField"},"text":"

Nu tar länsstyrelserna i Skåne och Halland NanoLearning till hjälp för att få extra skjuts i arbetet för att utveckla och stärka tillämpningen av barns rättigheter.

\n","_modelApiKey":"insight","_publishedAt":"2023-10-11T14:01:12+02:00","contentText":"

The country's county administrations are tasked with developing and strengthening the application of children's rights both in their own operations and providing support to municipalities and regions. To help them, the employees of the county administrative boards have tools in the form of knowledge and method support for examining the best interests of the child. The challenge is to get more people to apply the rights of the child in their own business and make use of the knowledge support . Now the county administrations in Skåne and Halland are using NanoLearning to get an extra boost in that work.

Martina Holmgren works as a development strategist at the county board in Skåne and she sees great opportunities with NanoLearning as a method to introduce questions about children's rights. It is about raising knowledge with an effective method and, not least, giving tips and advice on how the county board's employees can use the knowledge and method support that is already available.
- That is the effect we want to achieve and intend to measure. Method support that few use is of no use, notes Martina Holmgren.

Part of a whole
The effort with NanoLearning around children's rights issues is part of a whole where the Skåne County Administrative Board offers the businesses physical workshops on the Convention on the Rights of the Child and its application in practice and other competence-enhancing efforts both internally and for other actors in the region. Martina Holmgren is convinced that both parts are needed and she has received many positive reactions to the course based on NanoLearning.
- Many people appreciate the short format and that the introduction has a clear timetable so that you as a user know how often the lessons come and how long the course lasts.

Difference between voluntary and mandatory
The NanoLearning course in children's law is voluntary and is aimed at hand-picked employees. Marketing and introducing a voluntary education in an organization where continuing education in other areas is often mandatory requires a lot of preliminary work and anchoring.
- At an early stage, we have informed and involved relevant managers and business development functions at the authority. To get help in finding participants for the training, we have turned to unit and department heads at the two county administrative boards, says Martina Holmgren. All participants have also received information about the structure, when the various training sections will come and what the training is about.

As a development strategist, she sees great opportunities to use NanoLearning as a method in other related issues. Like for example. equality integration, or integration of human rights.
- Actually, all areas where we have different types of work or method support and where employees both need knowledge about why an issue is important and how to then work with it, says Martina Holmgren.

The next step will now be to evaluate the results of the first course and then analyze and move on.

\n"},{"__typename":"InsightRecord","slug":"human-firewalls-and-security-awareness","title":"Test: Human Firewalls and Security Awareness","image":{"url":"https://www.datocms-assets.com/64114/1655292061-cybersecurity_en_arno_mats_hultgren_robert_willborg_awareness.mp4?fm=webp","alt":null,"__typename":"FileField"},"text":"

With few exceptions, recent major incidents can all be crunched down to one single thing – the human factor. Not “patching” the human firewall has proven to be hazardous and even fatal. And the common denominator spells a lack of a security awareness process.

\n","_modelApiKey":"insight","_publishedAt":"2023-10-11T13:00:40+02:00","contentText":"

Throw the concept “incident management” into a pit full of security experts and watch them go frenzy like sharks on Discovery. Suggestions of best practice solutions for best strategy in incident mitigation will hail. Seldom, if ever, the root cause will be addressed – the lack of effective security awareness.

\n\n

One magic back door portal to your infrastructure is the password. In this article, it will act as an example for the argument as such.

\n\n

Cracking passwords is the holy grail of many attacks. If successful, you´re in, undetected to wreak havoc, steal information and encrypt the endpoint in pursuit of ransom. So, having a secure password is of essence. Many claims how complex entropy, hashing stored passwords and two-factor authentications will secure your infrastructure, making it hard for brute force attacks, rainbow table or even dictionary attacks. The debate is ongoing as we speak, over which, if only one of these is the safest and most secure option.

\n\n

Time out. How did we come to this? Solving a human issue with technology, often expensive at that?

\n\n

The Achilles heel is (hu)man. All agree on this. Recent studies conclusively point to the human factor. Whether it is about incidents involving personal data or infrastructural breaches, it all boils down to the human firewall that is seldom “patched”if ever. And if you have a security awareness program, it is often one event you tick off annually instead of raising awareness all year round and focusing on the risk behaviors.

\n\n

The typical user in our cyber era is mobile, communicative and needs to be protected on endpoint level as they are a vulnerable part of the internet of things. The back door into your infrastructure is, as previously stated, their passwords. We all know hacking via social engineering, shoulder surfing on a café or even finding one of their sticky notes with “Summer123456!” written on it poses a highway into your infrastructure. This is where security awareness could be a game changer. If a person knows how to conduct and behave – and create strong passwords – you are on your way to a more secure infrastructure. Weak passwords are like plywood doors, protecting the new gold – personal data. Knowing not to surf on open WiFi neetworks, to really stop and think, even ask a colleague before reacting can be the difference between a breach or not. So, you need to educate the people by raising awareness with focus on risk reduction.

\n\n

But how does security awareness training come in to play? Surely technical tools are enough. Individuals need to understand why to do things in a certain way. The why is simple – it´s cheaper than any security tool if done right. The how is a little trickier.

\n\n

Security Awareness is a process, not a project or an event that is crossed off on the business checklist. The threat landscape is ever changing and in a constant flux. So does your process need to be. Day after day, year after year.
Focus – one thing at a time, one topic at a time.
Measure the effect – ensure you´re doing the right thing. Phishing simulations could very well be one such variable testing the effect of your awareness process.

\n\n

Cyber-attacks exploit the human weaknesses, provoking mistakes to gain unlawful access to data, devices and network. At an employee level, continuously assuring alertness, knowledge and dialog are crucial parts of any organization’s defense. Without awareness training, employees will gradually forget, become less alert – and the security risk gap will increase over time.

\n\n

Furthermore, pre- and post-training metrics on key digital security behaviors give you a clear indication of where to focus further risk reducing initiatives.

\n"},{"__typename":"InsightRecord","slug":"how-to-avoid-information-overload","title":"How to avoid information overload","image":{"url":"https://www.datocms-assets.com/64114/1663756079-telephone-telegraph-pole-wire.jpeg?fm=webp","alt":null,"__typename":"FileField"},"text":"","_modelApiKey":"insight","_publishedAt":"2023-10-11T13:01:15+02:00","contentText":"

The concept of information overload was first defined by Professor Bertram Gross in his book The Managing of Organizations from 1964:

\n\n

\"Information overload occurs when the amount of information to a system exceeds its processing capacity. Decision makers have rather limited cognitive processing capacity. Consequently, when information overload occurs, it is likely that a reduction in decision-making quality will occur ...\"

\n\n

When we try to reach our targeted audiences with an ‘all at once’ approach, it’s really a sign of us loosing focus on what’s important here and now.

\n\n

We simply do not do our job as the sender to make things easier for the recipient. Sometimes all of us probably think that everything is important. Everything must be included. But does it really have to? Some things are certainly more important than others, and some are most important. But how does information abundance manifest itself?

\n\n

Let me first ask you a question:

\n\n

How many things can you keep in mind when you go shopping for food before you have to write an action list?

\n\n

1,2,3,4,5…?

\n\n

Are you like me and stop there? You and I are not alone, on average there are 4-5 things we can keep in our immediate memory at the same time. It is very easy to get an abundance of information.

\n\n

This raises an immediate question: what happens to all the information if we have an hour of training, or a 20-page policy document with lots of facts that we require our employees to follow?

\n\n

Let’s say that we are presenting the goals for Agenda 2030, does our audience even have a chance to remember all 17 goals, and are they all equally important to our business? Some organizations work with up to 100 KPIs to manage their business. Is it even possible to have efficient processes with so much to consider for our co-workers?

\n\n

The least we can do is to give our audiences a fair chance and stop serving them a smorgasbord with 20-30-40 different facts without prioritizing them. When doing this, we leave it to the audience to decide for themselves what they think is important to remember, and this usually happens unconsciously.

\n\n

With this in mind, it can be good not to actually serve an entire smorgasbord at once but instead divide the serving information we want to communicate into small edible portions. And we can control by serving the most important things at the right time. That is what we should focus on.

\n\n

So what can we learn from this? Yes, \"less is more\" - take one topic at a time.

\n"},{"__typename":"InsightRecord","slug":"can-we-listen-and-read-at-the-same-time","title":"Can we listen and read at the same time?","image":{"url":"https://www.datocms-assets.com/64114/1663755498-audiobook-tablet-touch-screen-read.jpeg?fm=webp","alt":null,"__typename":"FileField"},"text":"","_modelApiKey":"insight","_publishedAt":"2023-10-11T13:01:44+02:00","contentText":"

Ever watched a PowerPoint presentation with lots of text and a person talking at the same time? Thought so. And afterwards, having a a hard time really remembering anything? Instead of remembering what the presentation was all about, we remember fragments of what the person said and fragments of the text.

\n\n

Or have you attended a digital education where there is text and a voice over at the same time? Same thing happens again: we remember fragments of the speaker's voice or fragments of the text.

\n\n

That's all right. This is how our brain works.

\n\n

In Neuroscience, a lot of research is done on the brain and our memory capacity. The part of the brain that registers sound is the Auditory cortex and it is located in each half of the brain. This means that we can hear several things at the same time. If two people are talking to each other, we can still hear them both. But can we focus and understand both? No, for that function of the brain, the broca or wernicke network, there is only one.

\n\n

This is why it becomes a bottleneck and why we can only focus and understand one source of sound at a time.

\n\n

But text and sound should go well then? It is true that there is Visual cortex in both halves of the brain, but if we read text, the brain processes it as if we read the text aloud and it goes via Auditory cortex and on to the broca or wernicke network in order for us to understand what we read. That is the bottleneck and we that’s why we can’t listen to a voice and read at the same time. And it gets even worse if we have a voice that says the same thing we read.

\n\n

But what should we do then?

\n\n

If we want to strengthen our messages, the first thing we need to do is to remove all long texts from our PowerPoint presentations. Less is more – and better. Research shows that single words can work very well to support what we want to say (seven supporting words seems to be optimal). On the other hand - the best thing to do, is to get rid of all the words and just use images that support what we want to say.

\n\n

And if we want to streamline learning in our digital educations, we only have one choice. Text or sound. Not both of them at the same time.

\n\n

So, why do so many e-learning productions use a combination of text and sound? Unfortunately, I think there’s a lack of focus on the most important thing: streamlining learning. Getting the effects that we want.

\n\n

What we really need is a focus on how we create effective learning based on how we humans and our brains work.

\n"},{"__typename":"InsightRecord","slug":"the-netherlands-is-on-top-of-the-list-but-we-re-not-that-good","title":"“The Netherlands is on top of the list. But we're not that good.”","image":null,"text":"

The Netherlands is viewed as one to the top tier countries when it comes to cyber-security. Still 1 out of 5 organizations are still being hacked every year. ‘We’re doing good but we need to improve’, says Arno van den Hof, country representative for Junglemap in the Netherlands.

\n","_modelApiKey":"insight","_publishedAt":"2023-10-11T13:02:33+02:00","contentText":"

It’s hard to compare how different countries are performing on cybersecurity. Cultural and political differences effects how legislation and policies are perceived and adapted by organizations and the public. One success-factor according to Mats Hultgren, Director of Operations at Truesec, is to implement rules and regulations that are easy to understand.

\n\n

Robert Willborg, former CISO at Junglemap, highlights the fact that the Netherlands has legislation that demand that any organization that want to cooperate with governmental bodies, need to apply to certain cyber-security standards, including awareness raising.

\n\n

\n"},{"__typename":"InsightRecord","slug":"does-commitment-provide-better-learning","title":"Does commitment provide better learning?","image":{"url":"https://www.datocms-assets.com/64114/1663757018-girls-cell-phones-sitting-distracted.jpeg?fm=webp","alt":null,"__typename":"FileField"},"text":"","_modelApiKey":"insight","_publishedAt":"2023-10-11T08:37:57+02:00","contentText":"

Two concepts that are often combined together are commitment and e-learning. Many who create digital educations and e-learning aim to create commitment. \"We get the participants involved\" is a common comment. This has led to commitment becoming a goal in itself for the e-learning tools. As long as they are engaging, everything is fine.

\n\n

To create this commitment, learning must be lavish and attractive. Animations, video, sound. Preferably all in one. It's nice and it worth (the high) price tag that comes with it.

\n\n

Why? Because there’s a misconception that committed participants learn better. But does commitment provide better learning?

\n\n

Research shows that there is no connection between commitment and learning. There is no difference in learning between groups that learn through flashy good-looking presentations compared to those who learn by reading a text with the same message. Everything else is an illusion. Commitment is not the same as learning.

\n\n

So next time someone says they need to create an engaging education. Ask why it is important. Because what do you want to spend the money on? An effective affordable learning or a nice expensive and engaging presentation?

\n\n

\n"},{"__typename":"InsightRecord","slug":"localtapiola-our-employees-want-to-continue-with-nanolearning","title":"LocalTapiola: “Our employees want to continue with NanoLearning”","image":{"url":"https://www.datocms-assets.com/64114/1663939451-blur-cellphone-close-up-device.jpeg?fm=webp","alt":"Close up on woman holding a cellphone with two both hands","__typename":"FileField"},"text":"

LocalTapiola,a Finnish insurance company , had tried several different ways of learning and creating cyber security awareness. But nothing with a great success. Since 2021 they are using NanoLearning from Junglemap and the results are clear. – Basically, almost all of our employees want to continue with NanoLearning, says Information Security Manager Elina Saartoala.

\n","_modelApiKey":"insight","_publishedAt":"2023-10-11T13:05:51+02:00","contentText":"

Raising awareness among your employees play an important part in any organizations’ security work. And LocalTapiola have tried several different online courses over the years. Starting with traditional e-learning and moving on to high class videos, but not with so good result. - Nobody can remember anything after a one-hour e-learning, says Elina Saartoala.

\n\n

The videos, even though performed by professional actors and using humor and reality-based cases, didn’t give the desired effect either. 10 minutes was just too long, according to most employees.

\n\n

Since 2021 LocalTapiola is now using NanoLearning from Junglemap. Elina Saartoala appreciates the proactive support from Junglemap, from the pilot in the test phase to the smoothness in editing and tweaking some of the content. To be able to use the same content both in Swedish and Finnish is also an advantage for a multi-language organization.

\n\n

The idea for Junglemap came from other mutual insurance company and the numbers from the evaluation after the first year with Junglemaps’ Information Security Awareness training show a significant change: 96 percent liked the content and wants to continue with the NanoLearning concept. An astonishing 98 percent say they now follow the STAR-concept (Stop, think, Ask, React).
- In our organization security training is one of the mandatory trainings, says Elina Saartoala. So of course, the completion rate is high. But people were very interested in the method right from the start, and we’ve had a very good response.

\n\n

To be continued - with care

\n\n

With these strong numbers to back up the method and way of raising awareness, the choice to continue with NanoLearning might not come as a surprise. However, the organization has decided to make some adjustments for the next year. Instead of NanoLearning-lessons every third week, the idea is now to slow down the pace into one lesson per month.

\n\n

- We want to continue, but also re-new our distribution. We know that most of our users are fine with getting emails every third week, but we don’t want to people to lose attention and stop doing their lessons either.

\n\n

\n"},{"__typename":"InsightRecord","slug":"cybersecurity-is-a-key-factor-for-good-business-and-for-public-trust","title":"“Cybersecurity is the key for good business and public trust.”","image":null,"text":"

Cybercrimes is the number one threat both to companies and to governmental organizations. And to improve cybersecurity you need three things: policies, people and security-tech. Both private and public organization, and countries, need to have all these factors in mind. Arno van den Hof, Country Representative for Junglemap urges organizations to consider the risks – and not to being the weakest link in the chain.

\n","_modelApiKey":"insight","_publishedAt":"2023-10-11T13:08:46+02:00","contentText":"

More and more organizations realize that cybercrime is the threat number one worldwide. But there is still work to be done. Mats Hultgren, Director of Operations at Truesec, sees the need to tear down the walls between the public and the private sector. “We’re in this together, and we need to cooperate”. Arno van den Hof agrees and points out that not taking care of your company’s cyber security is bad for business, and for governmental organizations it’s a question of public trust. Citizens need to rely on the fact that privacy and information is in good hands.

\n\n

Robert Willborg, cybersecurity expert and CISO at Junglemap, claims that the only vaccine or long-term cure against cyber-crime is to raise awareness. Only the power of knowledge and awareness, allows you to make the right demands both as a citizen and a customer.

\n"},{"__typename":"InsightRecord","slug":"you-don-t-need-to-understand-it-anymore-all-you-need-is-a-finger","title":"“You don’t need to understand IT anymore. All you need is a finger”","image":null,"text":"

Making digital assets available and easy to use, has led up to a point where the user basically doesn’t need any knowledge about the underlaying technology. According to Mats Hultgren, Director of Operations at Truesec, this is one of the reasons that organizations are so vulnerable to cyber-attacks. The lack of basic understanding of IT.

\n","_modelApiKey":"insight","_publishedAt":"2023-10-11T13:09:06+02:00","contentText":"

Robert Willborg, security expert and former CISO at Junglemap, agrees but also points out that there’s a great need of strengthening the trust in IT among users. And this should start at an early age. Instead of being afraid, and not allowing their children to use social media platforms, parents need to encourage their kids, but also have an ongoing conversation about safety and security online.

\n\n

Conversation is being moderated by Paulina Modlitba, journalist and public speaker.

\n"},{"__typename":"InsightRecord","slug":"cybercrime-is-business-big-business","title":" “Cybercrime is business. Big business.”","image":null,"text":"

Arno van den Hof, country representative for Junglemap in the Netherlands, urges organizations not to be the weakest link when it comes to cybersecurity. Mats Hultgren, Director of Operations at Truesec, points out that Cybercrime is big business driven by a cybercrime ROI – that puts SME:s into a higher risk.

\n","_modelApiKey":"insight","_publishedAt":"2023-10-11T13:09:35+02:00","contentText":"

Since all organizations today have some kind of IT-system, they’re all at some kind of risk for a cyber-attacks. Mats Hultgren sees a trend in cybercrime where many ‘threat actors’ are targeting multiple smaller organizations instead of a few internationals. This underlines the need for all business to make sure they have a better understanding of their unique risk profile, says Mats Hultgren.

\n\n

Robert Willborg, cybersecurity expert and former CISO at Junglemap, wants to emphasize the need to focus on the organization’s coworkers. Most people spend more time on social media outside of work than in the digital environment of the workplace and bring their private online habits with them to work.

\n"},{"__typename":"InsightRecord","slug":"cybersecurity-work-needs-more-carrots-than-sticks","title":"”Cybersecurity work needs more carrots than sticks.”","image":null,"text":"

How can countries and regions improve the state of cybersecurity? According to security experts Arno van den Hof, country representative for Junglemap in the Netherlands, Mats Hultgren, Director of Operations at Truesec and Robert Willborg, CISO at Junglemap we need to use more carrots than sticks to make organizations to improve their cybersecurity.

\n","_modelApiKey":"insight","_publishedAt":"2023-10-11T13:10:02+02:00","contentText":"

We don’t need any more legislation when it comes to cybersecurity. But the legislation needs to be more updated, agile and the processes up to speed, to be relevant and useful. Otherwise, the legislation might be contra productive when implemented, says Mats Hultgren.

\n\n

Robert Willborg points out that there are several laws in place targeting cyber-crimes. But there’s a lack of initiatives to urge organizations to create and maintain awareness.

\n"},{"__typename":"InsightRecord","slug":"accepting-that-you-re-a-beginner-is-how-you-create-a-learning-mindset","title":"“Accepting that you’re a beginner is how you create a learning mindset”","image":null,"text":"

The way we work and how organizations function is undergoing rapid change. Ann Therese Enarsson, CEO of the union affiliated think tank Futurion, refers to studies indicating that half of all the tasks we perform today, will be automatized in 20 years. This means we all need to learn new things. All the time.

\n","_modelApiKey":"insight","_publishedAt":"2022-11-16T14:22:19+01:00","contentText":"

Many organizations are looking to have a ‘learning mindset’. The key to that is to accept that you’re a beginner, says educator and speaker Anna Tibelius Bodin. And it can’t start with the newly recruited staff. It needs to start with leadership. Only when leaders are open to people not being experts, organizations are able to create an atmosphere of people being on a learning curve.

\n\n

Matti Olofsson, learning expert and former CCO at Junglemap, claims that ‘most companies are lost’ when it comes to learning. Simply because they keep measuring completion rates in trainings and not the effects of the training. It takes focus on the effects and the behavioral change; organizations can start being fit for the future.

\n"},{"__typename":"InsightRecord","slug":"get-rid-of-the-e-in-e-learning-it-s-just-learning","title":"“Get rid of the e in e-learning. It’s just learning.”","image":null,"text":"

Matti Olofsson, expert on learning and former CCO at Junglemap, highlights that as long as an organization is compliant driven, it will never be able to look ahead, and have a long-term perspective on learning. To go from a ‘compliance mindset’ to a ‘learning mindset’ is the most important mind shift, according to Matti Olofsson. Because compliance create shortcuts and not learning.

\n","_modelApiKey":"insight","_publishedAt":"2023-10-10T14:46:50+02:00","contentText":"

With a work life in rapid transition, tomorrow’s winners are the ones who invest in their employees learning. Ann Therese Enarsson, CEO of the union affiliated think tank Futurion, refers to studies implying that we need to build ‘a new university a day’ just to cover the global skills shortage. Now, since that’s not going to work, we need a new echo-system for learning.

\n\n

To begin with, organizations need to accept that we are all learners. According to educator and speaker Anna Tibelius Bodin, turning the time we consume information into actual learning will be much more efficient and it will make a difference for any organization.

\n\n

The main reason for organizations leadership not doing this already is, according to Anna Tibelius Bodin, that ‘they are getting away with it’ and that learning might seem important in long term, but not acute. And therefore, never measured properly.

\n\n

\n"},{"__typename":"InsightRecord","slug":"organizations-need-to-re-think-how-and-where-we-learn-new-things","title":"“Organizations need to re-think how and where we learn new things”","image":null,"text":"

Anyone who wants to contribute to an organization, need to be in learning. But it’s not more certificate that is needed. Because certificates always lead to shortcuts. The important thing according to Anna Tibelius Bodin is that learning needs to be integrated in you every day work life.

\n","_modelApiKey":"insight","_publishedAt":"2023-10-10T14:47:10+02:00","contentText":"

Today’s students will have 17 jobs in five different industries, studies indicate. Ann Therese Enarsson, CEO of the union affiliated think tank Futurion, says that this calls for a ‘learning revolution’ where organizations need to re-think how and where we learn new things.

\n\n

The Swedish model, with its’ shared responsibility on upskilling and reskilling, has been historically successful in handling transition. And the change we’re going through right now, is no different. According to Ann Therese, there needs to be a balance between employers and employees when it comes to learning.

\n\n

Matti Olofsson, learning expert and former CCO at Junglemap, thinks that many organizations don’t take the responsibility that they should. Not many of us wake up in the morning with the idea of taking a class or study something. The employer needs to take a much more active responsibility for the training to actually happen.

\n"},{"__typename":"InsightRecord","slug":"how-to-cope-with-the-vuca-year-2023-by-reversing-the-vuca","title":"How to cope with the ”VUCA-year 2023\"? By reversing the VUCA!","image":{"url":"https://www.datocms-assets.com/64114/1648718841-junglemap_per.jpg?fm=webp","alt":"Portrait of Communications Director Per Lagerström","__typename":"FileField"},"text":"

After two years of pandemic, and a 2022 with war in Ukraine, European energy crisis and global inflation, most things point to 2023 being a real "VUCA year". A volatile, uncertain, complex and ambigious year. The question is how to handle this? It's about "turning the VUCA" and having methods for it, says Per Lagerström, Head of Marketing & Communication at Junglemap.

\n","_modelApiKey":"insight","_publishedAt":"2023-10-11T12:41:26+02:00","contentText":"

The term VUCA, which describes a state characterized by Volatility, Uncertainty, Complexity and Ambiguity is said to have been coined by the American defense industriy already in the aftermath of the attacks on the World Trade Center over twenty years ago. But even if it may have been something of the new normal since then, it feels as if it really frames the state of the world around us right now.

\n\n

There is no doubt that a VUCA-environment leads to high level of stress on both individuals and organizations. Increased anxiety, lower motivation, crushed or overturned future plans, bad decision-making and a worse business climate, follows VUCA in its wake.

\n\n

All the more important to consider how we deal with this negative VUCA existence. Both as individuals, companies and organisations. It's really about keeping the acronym, but turning the meaning 180 degrees.

\n\n

Counter volatility with vision
The more things shake, the clearer visions are needed. A first important step is to start by accepting and acknowledging that change is the new normal, and then create a clear vision based on these conditions.
Face uncertainty with understanding
Increased uncertainty also needs to lead to the need for increased analysis. Both within the own industry and outside. And customer's needs and challenges need to be in focus. Work with scenario planning: \"If it turns out like this, what do we do?\" “Does this plan work if X happens?” - those types of questions need to be included in the planning work for next year.
Respond to complexity with clarity
Complex is often confused with complicated. But these two are completely different things. Complicated things are hard to do, but can be done again. Complexity means that we often need to do things in a completely new way. And to fix this, two things are required: increased clarity in the management’s strategic communication, as well as an increased need for well-composed and multi-competent teams. Because complex challenges cannot be solved with one type of competence. And above all, not on your own.
Combat ambiguity with agility
It’s not a black or white type of situation. It’s both. And the more difficult something is to interpret, the greater the need for an agile approach and way of working. Going into 2023 with the idea that \"let’s work according to plan\" will not be a good idea. Better then plan with the starting point that every single roadmap will need to be redone and changed along the way. And this requires that the entire organization is given the opportunity to work agile.

\n\n

An inverted VUCA environment like this provides a prerequisite for what all companies and organizations must strive for - an increased resilience. The ability not only to adapt, but also to recreate and innovate operations and value in constant change.

\n\n

Junglemap invented NanoLearning over 15 years ago. It's basically a method that creates learning that produces long-term behavioral changes. But it is also a method and a tool for those who really want to \"turn the VUCA around\". It’s not enough just to know what we need to do, but also how. And with communication methods that really work.

\n"},{"__typename":"PageRecord","slug":"whitepaper","title":"whitepaper","_modelApiKey":"page","_publishedAt":"2025-03-03T09:08:09+01:00","contentText":""},{"__typename":"PageRecord","slug":"compliance-courses-grc","title":"Compliance courses (GRC)","_modelApiKey":"page","_publishedAt":"2024-03-27T11:19:29+01:00","contentText":"","text":"Our Junglemap Comply courses are easy to adapt to your needs. The courses provide an introduction to topics related to governance, risk management and compliance (GRC). Raise your employees' awareness on important ethical business practices, good corporate ethics and ensure compliance with laws and regulations.","image":{"url":"https://www.datocms-assets.com/64114/1663742368-sustainability-intro.jpeg?crop=focalpoint&fm=webp&h=600&w=928","alt":"Windmills in an open field in sunset","height":607,"width":910,"blurhash":"LeFD|}$%I;jsS5azoLfk10NIxYbH","blurUpThumb":"data:image/jpeg;base64,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","colors":[{"hex":"#FAAC38","__typename":"ColorField"},{"hex":"#A49F9D","__typename":"ColorField"},{"hex":"#674439","__typename":"ColorField"},{"hex":"#6D3017","__typename":"ColorField"},{"hex":"#FCE191","__typename":"ColorField"},{"hex":"#573C37","__typename":"ColorField"}],"__typename":"FileField"}},{"__typename":"PageRecord","slug":"security-awareness-training","title":"Security Awareness Training","_modelApiKey":"page","_publishedAt":"2024-03-27T11:17:46+01:00","contentText":""},{"__typename":"PageRecord","slug":"create-your-own-courses","title":"Create your own courses","_modelApiKey":"page","_publishedAt":"2024-12-31T10:26:26+01:00","contentText":"","text":"Use our AI-integration to create the course content you need. Upload your policy documents, let AI convert them into 3-minute NanoLearning lessons and distribute and follow up on compliance through our platform.","image":{"url":"https://www.datocms-assets.com/64114/1701781496-vision1-about-us.jpg?crop=focalpoint&fm=webp&h=600&w=928","alt":null,"height":2862,"width":4300,"blurhash":"LNDcadIU00t7t6ofxuWBadkCRkj[","blurUpThumb":"data:image/jpeg;base64,/9j/4AAQSkZJRgABAQAAAQABAAD/2wCEAAoHBwgHBgoICAgLCgoLDhgQGg0NDhYVFhYVHR8ZGBoVFhgdJSslJikoHRUWJDUlKC0vMjIyGSI4PTcwPCsxMi8BCgsLDg0JEBAKGS8cGhwvLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vL//AABEIABAAGAMBIgACEQEDEQH/xAAXAAEAAwAAAAAAAAAAAAAAAAAGAQIH/8QAIBAAAQQCAQUAAAAAAAAAAAAABQABAgQDERQGEyJBUf/EABYBAQEBAAAAAAAAAAAAAAAAAAIBAP/EABcRAQADAAAAAAAAAAAAAAAAAAACERL/2gAMAwEAAhEDEQA/ABgYeHlmby26Z8MXCvFkAC5aOK3Fnf2tLhkFcKMpfEsxEaOUhXY26hW6jIh4V9aUqVFn/9k=","colors":[{"hex":"#886C3C","__typename":"ColorField"},{"hex":"#B8B8B8","__typename":"ColorField"},{"hex":"#787C83","__typename":"ColorField"},{"hex":"#464749","__typename":"ColorField"},{"hex":"#0D3942","__typename":"ColorField"}],"__typename":"FileField"}},{"__typename":"PageRecord","slug":"products","title":"Products","_modelApiKey":"page","_publishedAt":"2024-12-31T10:31:55+01:00","contentText":"","text":"Our three product packages give access to efficient learning and awareness training with measurable effects. Create your own courses, use our standard ready-to-go cybersecurity awareness training, or choose any of our courses on compliance. Key features for distribution, reporting, brand customization and effect measurement are always included.","image":{"url":"https://www.datocms-assets.com/64114/1648800887-junglemap_information-security-awareness-for-managers.jpg?crop=focalpoint&fm=webp&h=600&w=928","alt":"Image of information security and awareness course for managers","height":1334,"width":2000,"blurhash":"LqHCAn_Nx]t7RQofofofM{WBRjkC","blurUpThumb":"data:image/jpeg;base64,/9j/4AAQSkZJRgABAQAAAQABAAD/2wCEAAoHBwgHBgoICBQUFgoXDhgQDQ0NDhEWDQ0YFxUZGCIVFhUmHysjGh0oHRUWJDUlKC0vMjIyGSI4PTcwPCsxMi8BCgsLDg0OFQ4MEC8cIhwvLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vL//AABEIABEAGAMBIgACEQEDEQH/xAAYAAEBAQEBAAAAAAAAAAAAAAAGAAcFAf/EAB8QAAEEAQUBAAAAAAAAAAAAAAABAgMEBRESM0FRE//EABcBAAMBAAAAAAAAAAAAAAAAAAEDBAD/xAAYEQEAAwEAAAAAAAAAAAAAAAAAAgMSAf/aAAwDAQACEQMRAD8AXWYU+Lmr4DLdJrbL3Gi35Kqou0FZN0aTu2m70KpAmUxjrFpdCO1PNHFPqpC9KdtAtdhbIc6npBkjrG8hykRCz3//2Q==","colors":[{"hex":"#895639","__typename":"ColorField"},{"hex":"#CCD2D3","__typename":"ColorField"},{"hex":"#9D765B","__typename":"ColorField"},{"hex":"#512D1E","__typename":"ColorField"},{"hex":"#C49278","__typename":"ColorField"},{"hex":"#4D3727","__typename":"ColorField"}],"__typename":"FileField"}},{"__typename":"PageRecord","slug":"partnership","title":"Partnership","_modelApiKey":"page","_publishedAt":"2024-03-21T14:49:18+01:00","contentText":"

Reliable and experienced

\n\n

Today, over 1400 organisations use our training courses to create and maintain an increased awareness of information security. Through partnerships, we can reach even more.

\n\n

With Junglemap you get a partner with over 20 years of experience, who knows both cyber security and learning. In addition, we have a method and model that is easily scalable and suitable for both small and large organisations.

\n\n

We ourselves are looking for cooperation with management and IT consultants, system suppliers and others who work closely with organisations that also need to strengthen their information security.

\n","text":"Are your clients struggling with cybersecurity awareness? Partner with us! Let's create both value and awareness together.","image":{"url":"https://www.datocms-assets.com/64114/1700643368-partnership-header-1.jpg?crop=focalpoint&fm=webp&h=600&w=928","alt":null,"height":883,"width":1696,"blurhash":"LUHLxRR*bwxF_Naet7t7W=M{e.kC","blurUpThumb":"data:image/jpeg;base64,/9j/4AAQSkZJRgABAQAAAQABAAD/2wCEAAoHBwgHBgoICAgLDRYPDiQWFRYNDh0VDRUNFxUaGCIfFhUdHysjGh0oHSEWJDUlKC0vMjIyGSI4PTcwPCsxMi8BCgsLDg0OHA4QHC8cIhwvLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vL//AABEIAA0AGAMBIgACEQEDEQH/xAAZAAABBQAAAAAAAAAAAAAAAAAHAAMEBQb/xAAdEAACAQQDAAAAAAAAAAAAAAABBAACAwURBhUi/8QAFQEBAQAAAAAAAAAAAAAAAAAAAQL/xAAXEQEBAQEAAAAAAAAAAAAAAAABAgAR/9oADAMBAAIRAxEAPwC/XYZNRO42u81bdMG6XLskSd1iTUeRvXGajVUJNriJOYjWsmxcd1uKYJTPudifUUSnDJ3f/9k=","colors":[{"hex":"#AE623F","__typename":"ColorField"},{"hex":"#B3BCB7","__typename":"ColorField"},{"hex":"#92745D","__typename":"ColorField"},{"hex":"#2C5367","__typename":"ColorField"},{"hex":"#E7CAAB","__typename":"ColorField"},{"hex":"#554A3B","__typename":"ColorField"}],"__typename":"FileField"}},{"__typename":"PageRecord","slug":"ai-trial-terms-of-use","title":"Junglemap AI Trial Terms of Use","_modelApiKey":"page","_publishedAt":"2023-09-06T09:21:46+02:00","contentText":""},{"__typename":"PageRecord","slug":"cybersecurity-awareness-2024","title":"Cybersecurity Awareness","_modelApiKey":"page","_publishedAt":"2024-03-18T14:35:31+01:00","contentText":"

Phishing simulation included

\n\n

Phishing is one of the absolute biggest cyber threats against organizations and more than 7 out of 10 successful attacks are due to human errors. This is why phishing simulations are such a crucial part of preventing future attacks.

\n","text":"

Phishing simulation included

\n\n

\n","image":{"url":"https://www.datocms-assets.com/64114/1686899695-laptop.png?crop=focalpoint&fm=webp&h=600&w=928","alt":"Glass of coffe standing beside laptop on a work desk","height":990,"width":1920,"blurhash":"LSIX]UH;%K_N?uxt$z-oI9?vt79F","blurUpThumb":"data:image/jpeg;base64,/9j/4AAQSkZJRgABAQAAAQABAAD/2wCEAAoHBwgHBgoICAgLCgoLDhgQFhUNFxIVFRUdIR8bGCITFiEcJSsjGh0oHSEWJDUlKC0vMjIyGSI4PTcwPCsxMi8BCgsLDg0OHBAQHC8cFh0vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vL//AABEIAA0AGAMBIgACEQEDEQH/xAAZAAACAwEAAAAAAAAAAAAAAAAEBQEDBgD/xAAgEAAABgICAwAAAAAAAAAAAAAAAQIEBREDIQYSExRB/8QAFQEBAQAAAAAAAAAAAAAAAAAABAP/xAAYEQADAQEAAAAAAAAAAAAAAAAAAQIRA//aAAwDAQACEQMRAD8AJcymPBDLRjO9BLw9PuyJ99WoDxNumJllOxU0zrjpAvAdbA+bktUs3/I402jRK0n8EhRNSznPFJ7qvQ4K2SDln//Z","colors":[{"hex":"#C67B2B","__typename":"ColorField"},{"hex":"#CFCAAD","__typename":"ColorField"},{"hex":"#9C7956","__typename":"ColorField"},{"hex":"#010E02","__typename":"ColorField"},{"hex":"#D9C9A1","__typename":"ColorField"},{"hex":"#2E5253","__typename":"ColorField"}],"__typename":"FileField"}},{"__typename":"PageRecord","slug":"ai-course-creation","title":"AI course creation","_modelApiKey":"page","_publishedAt":"2023-06-05T09:29:57+02:00","contentText":"","image":{"url":"https://www.datocms-assets.com/64114/1684324557-technology-developer-touch-finger.jpg?crop=focalpoint&fm=webp&h=600&w=928","alt":"Image with a robotic hand and a human hand reaching into the middle.","height":511,"width":910,"blurhash":"LT9[V_N{QknNtSaeaJWB4nwvpJbv","blurUpThumb":"data:image/jpeg;base64,/9j/4AAQSkZJRgABAQAAAQABAAD/2wCEAAoHBwgHBgoICAgLEwoSDhgXDQ0NDh0VHA0NFxcZGCIVIiEmHy0jHR0oHSEiJDUlKC0vMjIyHSI4PTcwPCsxMi8BCgsLAg0OHBAQHDsoGig7Ly87Lzs7OzsvLy8vLy8vLy81Lzs7Ly8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vL//AABEIAA4AGAMBIgACEQEDEQH/xAAYAAACAwAAAAAAAAAAAAAAAAABBgAFB//EACEQAAECBgIDAAAAAAAAAAAAAAEABAIDBQYRElGRExQx/8QAFQEBAQAAAAAAAAAAAAAAAAAABQT/xAAbEQABBAMAAAAAAAAAAAAAAAADAAUSFQECIf/aAAwDAQACEQMRAD8AUaVbDabMAMxN5s5rCyzuPnKz9lUnEmYDDEUwxXE89cDY9pAWHKKJPs2526i6tVvBk7BBVFQrrnxZyVFCS0krx0kV/9k=","colors":[{"hex":"#2AE3F2","__typename":"ColorField"},{"hex":"#D8B4A7","__typename":"ColorField"},{"hex":"#9C6654","__typename":"ColorField"},{"hex":"#08376B","__typename":"ColorField"},{"hex":"#6DF3FB","__typename":"ColorField"},{"hex":"#6E4533","__typename":"ColorField"}],"__typename":"FileField"}},{"__typename":"PageRecord","slug":"ai-with-junglemap","title":"AI with Junglemap","_modelApiKey":"page","_publishedAt":"2023-11-09T10:15:31+01:00","contentText":"

Try AI with Junglemap today

\n\n

In three easy steps you will have your NanoLearning course ready and distributed to your targeted audience.

\n\n

1. Just pick a topic, your preferred number of lessons and language – and let our specialized AI create a first draft.

\n\n

2. Then make your own edits and quality check, add your branded colour and fonts.

\n\n

3. Add your recipients and set your distribution plan. All set to go!

\n\n

With Junglemap AI Trial you get a 14-day access to our AI Feature with the possibility of distributing a finalised course to up to 10 recipients.

\n\n

Try AI with Junglemap now – register here!

\n","text":"

Try AI with Junglemap today

\n\n

In three easy steps you will have your NanoLearning course ready and distributed to your targeted audience.

\n\n

1. Just pick a topic, your preferred number of lessons and language – and let our specialized AI create a first draft.

\n\n

2. Then make your own edits and quality check, add your branded colour and fonts.

\n\n

3. Add your recipients and set your distribution plan. All set to go!

\n\n

With Junglemap AI Trial you get a 14-day access to our AI Feature with the possibility of distributing a finalised course to up to 10 recipients.

\n\n

Try AI with Junglemap now – register here!

\n","image":{"url":"https://www.datocms-assets.com/64114/1692193753-ai-1-2-3.json?crop=focalpoint&fm=webp&h=800","alt":"JSON","title":null,"blurUpThumb":null,"blurhash":null,"format":"json","colors":[],"__typename":"FileField"}},{"__typename":"PageRecord","slug":"plans-products-and-features","title":"Plans products and features","_modelApiKey":"page","_publishedAt":"2024-02-23T09:46:36+01:00","contentText":""},{"__typename":"PageRecord","slug":"newsletter-unsubscribed","title":"You are now unsubscribed from our Newsletter","_modelApiKey":"page","_publishedAt":"2023-02-17T15:42:11+01:00","contentText":"","text":"Your unsubscription to our Newsletter has been confirmed. Welcome back at any time.","image":{"url":"https://www.datocms-assets.com/64114/1674129124-star-allyearround-trees2.jpg?crop=focalpoint&fm=webp&h=600&w=928","alt":"four images of a tree in different seasons","height":800,"width":1422,"blurhash":"LSL#Omtl-:%2xvo#bbWC~qM{M{og","blurUpThumb":"data:image/jpeg;base64,/9j/4AAQSkZJRgABAQAAAQABAAD/2wCEAAoHBwgHBgoICAgLCgoVDhUVDhUYDhUVEAUOFx0ZGCIVFhUaHysjGikoHRUiJDUlKC0vMjIyGSI4PTcwPCsxMi8BCgsLDg0OHBANHC8cIigvLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vL//AABEIAA4AGAMBIgACEQEDEQH/xAAYAAACAwAAAAAAAAAAAAAAAAAABQMEB//EAB8QAAEDAwUAAAAAAAAAAAAAAAEAAxECBAUGEhQVMf/EABQBAQAAAAAAAAAAAAAAAAAAAAP/xAAXEQEBAQEAAAAAAAAAAAAAAAABEQAC/9oADAMBAAIRAxEAPwDQr3OkNEwk41Ed0J1fYtrjlJbfDs1uGUvKTGXWKc/NCFL0rIp9QjUuYu//2Q==","colors":[{"hex":"#6DC0F6","__typename":"ColorField"},{"hex":"#ACBDD2","__typename":"ColorField"},{"hex":"#9C9756","__typename":"ColorField"},{"hex":"#576322","__typename":"ColorField"},{"hex":"#6DC0F6","__typename":"ColorField"},{"hex":"#4A5232","__typename":"ColorField"}],"__typename":"FileField"}},{"__typename":"PageRecord","slug":"newsletter-unsubscribe","title":"Unsubscribe","_modelApiKey":"page","_publishedAt":"2023-02-17T15:43:54+01:00","contentText":""},{"__typename":"PageRecord","slug":"newsletter-confirmation","title":"Your subscription has been confirmed","_modelApiKey":"page","_publishedAt":"2023-03-13T10:04:35+01:00","contentText":"","text":"Your subscription to our newsletter has been confirmed.","image":{"url":"https://www.datocms-assets.com/64114/1663742368-sustainability-intro.jpeg?crop=focalpoint&fm=webp&h=600&w=928","alt":"Windmills in an open field in sunset","height":607,"width":910,"blurhash":"LeFD|}$%I;jsS5azoLfk10NIxYbH","blurUpThumb":"data:image/jpeg;base64,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","colors":[{"hex":"#FAAC38","__typename":"ColorField"},{"hex":"#A49F9D","__typename":"ColorField"},{"hex":"#674439","__typename":"ColorField"},{"hex":"#6D3017","__typename":"ColorField"},{"hex":"#FCE191","__typename":"ColorField"},{"hex":"#573C37","__typename":"ColorField"}],"__typename":"FileField"}},{"__typename":"PageRecord","slug":"newsletter-sign-up","title":"Sign up for our Newsletter","_modelApiKey":"page","_publishedAt":"2023-03-29T09:58:52+02:00","contentText":"","text":"This is where you subscribe to Junglemap's newsletter. Get regular news and tips on cyber security, awareness and learning. ","image":{"url":"https://www.datocms-assets.com/64114/1672830531-microphone-boy-studio-screaming.jpg?crop=focalpoint&fm=webp&h=600&w=928","alt":null,"height":607,"width":910,"blurhash":"LBKBL5R.9Z_3?c~qt7D*?bWXNFM{","blurUpThumb":"data:image/jpeg;base64,/9j/4AAQSkZJRgABAQAAAQABAAD/2wCEAAoHBwgHBhIQFAgSCw8QDQ0ODgYNChEJFhENFxMZGBYVFhUaHysjGh0oHRUWJDUlKC0vMjIyGSI4PTcwPCsxMi8BCgsLDgUFEBAQFS8cFhwvLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vL//AABEIABEAGAMBIgACEQEDEQH/xAAYAAEAAwEAAAAAAAAAAAAAAAAAAgQFBv/EAB4QAAEEAgMBAAAAAAAAAAAAAAABAgQFAzERMjMS/8QAFQEBAQAAAAAAAAAAAAAAAAAAAAL/xAAUEQEAAAAAAAAAAAAAAAAAAAAA/9oADAMBAAIRAxEAPwDr809iJslHmtcmzBl887Lldhc5pSlixmI1AVLTCvyAK8vsadZ5gAQteoAA/9k=","colors":[{"hex":"#BAB9C1","__typename":"ColorField"},{"hex":"#443C43","__typename":"ColorField"},{"hex":"#7B7D82","__typename":"ColorField"}],"__typename":"FileField"}},{"__typename":"PageRecord","slug":"insights","title":"Insights","_modelApiKey":"page","_publishedAt":"2023-04-03T15:02:24+02:00","contentText":"","text":"News, facts and insights on learning and information security"},{"__typename":"PageRecord","slug":"about-us","title":"About us","_modelApiKey":"page","_publishedAt":"2023-12-05T14:13:29+01:00","contentText":"

The story behind

\n\n

The NanoLearning method

\n\n

NanoLearning is a groundbreaking method that allows organizations to increase awareness and share knowledge through bite-sized lessons.

\n\n

But what does the learning process actually look like? One may think that it is highly individual, but if you look at the research, it shows that we all learn in the same way – that is how our brain is built. And in order to make sure that what you learn will actually be remembered, the answer is spelled repetition, reflection and reinforcement – which is what NanoLearning is all about.

Today, the method is used to create change through learning – with guaranteed effect.

\n","text":"Since 2005 we have reached over 7 million users in over 1400 organizations with our NanoLearning courses. Our vision: Everyone should remember what they learn. ","image":{"url":"https://www.datocms-assets.com/64114/1648812680-junglemap_placeholder_mobile_it_security.png?crop=focalpoint&fm=webp&h=600&w=928","alt":"Icon of Junglemap mobile with the text IT-security","height":1300,"width":638,"blurhash":"LHP6?S~W0g_3%hWWV?t7?wozMxWB","blurUpThumb":"data:image/png;base64,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","colors":[{"hex":"#E4AE4E","__typename":"ColorField"},{"hex":"#F7F4ED","__typename":"ColorField"},{"hex":"#79818A","__typename":"ColorField"},{"hex":"#17273B","__typename":"ColorField"},{"hex":"#EDCD93","__typename":"ColorField"},{"hex":"#29384A","__typename":"ColorField"}],"__typename":"FileField"}},{"__typename":"PageRecord","slug":"sustainability-courses","title":"Sustainability Courses","_modelApiKey":"page","_publishedAt":"2023-03-10T16:19:00+01:00","contentText":"","text":"With our courses in sustainability you will get an understanding of Agenda 2030 and how you, in your organization, can contribute to the goals and also how to improve your work environment."},{"__typename":"PageRecord","slug":"GDPR-courses","title":"GDPR & Privacy Awareness Courses","_modelApiKey":"page","_publishedAt":"2023-06-19T14:27:02+02:00","contentText":"","text":"Our GDPR & Privacy awareness training courses consist of 16 different NanoLearning lessons, including tests and evaluations, awareness surveys and management training. ","image":{"url":"https://www.datocms-assets.com/64114/1648800759-junglemap_gdpr_and_privacy_for_all_employees_course.jpg?crop=focalpoint&fm=webp&h=600&w=928","alt":"Detailed image of an eye with the color blue","height":1334,"width":2000,"blurhash":"LIC7Ts?wITW-o|N_x^.9?co~J8tS","blurUpThumb":"data:image/jpeg;base64,/9j/4AAQSkZJRgABAQAAAQABAAD/2wCEAAoHBwgHBgoRCAgLCg8RGRcNDg0QDBINDQ0YFxUaGCITFiEaHysjGh0oHRUWJDUlKC0vMjIyGSI4PTcwPCsxMi8BCgsLDg0OHBANHDUcFh0vNS8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vL//AABEIABEAGAMBIgACEQEDEQH/xAAaAAACAgMAAAAAAAAAAAAAAAAABAMGAQIF/8QAHxAAAQQDAAMBAAAAAAAAAAAAAAECAwQFITMSEzER/8QAFgEBAQEAAAAAAAAAAAAAAAAABAMC/8QAGhEAAgMBAQAAAAAAAAAAAAAAAAECETEhEv/aAAwDAQACEQMRAD8AdlyTXR6UTXJtYi/pFWqukj2Q3MevqUt2g3mSEMpk4Zk+gce1Rd5rswGknZq5F8o8jW5yUAGLCrKva6KAARemD//Z","colors":[{"hex":"#0C5BC1","__typename":"ColorField"},{"hex":"#ADC7D1","__typename":"ColorField"},{"hex":"#5493A2","__typename":"ColorField"},{"hex":"#0E536D","__typename":"ColorField"},{"hex":"#EAB667","__typename":"ColorField"},{"hex":"#324950","__typename":"ColorField"}],"__typename":"FileField"}},{"__typename":"PageRecord","slug":"service","title":"Our offer","_modelApiKey":"page","_publishedAt":"2023-03-10T16:18:47+01:00","contentText":"","text":"NanoLearning allows your organization to streamline your learning, and at the same time increase awareness and share knowledge through bite-sized lessons. Best of all? Get up and running within hours!","image":{"url":"https://www.datocms-assets.com/64114/1648812680-junglemap_placeholder_mobile_it_security.png?crop=focalpoint&fm=webp&h=600&w=928","alt":"Junglemap mobile","height":1300,"width":638,"blurhash":"LHP6?S~W0g_3%hWWV?t7?wozMxWB","blurUpThumb":"data:image/png;base64,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","colors":[{"hex":"#E4AE4E","__typename":"ColorField"},{"hex":"#F7F4ED","__typename":"ColorField"},{"hex":"#79818A","__typename":"ColorField"},{"hex":"#17273B","__typename":"ColorField"},{"hex":"#EDCD93","__typename":"ColorField"},{"hex":"#29384A","__typename":"ColorField"}],"__typename":"FileField"}},{"__typename":"PageRecord","slug":"it-security-courses","title":"Information Security Awareness Courses","_modelApiKey":"page","_publishedAt":"2023-06-19T14:24:35+02:00","contentText":"

Phishing simulation - an integrated part of our courses

\n\n

With our user-friendly platform, you can easily plan phishing simulations to achieve the best possible effect in your organization. The simulations can be integrated into our information security awareness courses and distributed randomly to different groups in the organization or to all employees at the same time.

\n\n

Anyone who clicks on the link in a phishing email automatically receives a follow-up lesson with tips on how to think in order to detect phishing. This way, learning is achieved both at an individual and organizational level.

\n\n

THE STORY BEHIND

\n\n

NanoLearning

\n\n

Let’s be honest, humans make mistakes.

NanoLearning was originally created to reduce the risk of security incidents. The idea was to create a way to build human firewalls by offering awareness training to all employees.

We found that the NanoLearning method was a way to increase awareness, knowledge and dialog around the topic – in order to avoid attacks.

Today the method is used to create change through learning – with measurable and guaranteed effects.

\n","text":"

THE STORY BEHIND

\n\n

NanoLearning

\n\n

\n","image":{"url":"https://www.datocms-assets.com/64114/1649666008-junglemap_nils_ivar_skaalerud_nanolearning_2.jpg?crop=focalpoint&fm=webp&h=800","alt":"Image of Junglemap founder Nils Ivar Skaalerud","title":"Nils Ivar Skaalerud, NanoLearning inventor","blurUpThumb":"data:image/jpeg;base64,/9j/4AAQSkZJRgABAQAAAQABAAD/2wCEAAoHBwgHBgoICBAVChULDhgQDQ0NFhgOFg0YGBUaGCIVFhUaHysjGh0oHSEWJDUlKC0vMjIyGSI4PTcwPCsxMi8BCgsLDg0OHAoOGC8cFhwvLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vL//AABEIABEAGAMBIgACEQEDEQH/xAAYAAADAQEAAAAAAAAAAAAAAAAABQYBA//EAB8QAAEEAgIDAAAAAAAAAAAAAAABAgMEBRESMyExMv/EABYBAQEBAAAAAAAAAAAAAAAAAAIDAf/EABgRAAMBAQAAAAAAAAAAAAAAAAACMQES/9oADAMBAAIRAxEAPwDMk1r49Excpo1eRV3p4Fj2hO3JmPYugvQouE3l28oNIB0vuajfJosg+cKu31CeT0oAB6BBNkfkAA3IUP/Z","blurhash":"LKAm-q_Nx^xvX8tRtRt7IoIpW=X8","format":"jpg","colors":[{"hex":"#985949","__typename":"ColorField"},{"hex":"#C9AD9B","__typename":"ColorField"},{"hex":"#748C92","__typename":"ColorField"},{"hex":"#543024","__typename":"ColorField"},{"hex":"#C4957A","__typename":"ColorField"},{"hex":"#33544A","__typename":"ColorField"}],"__typename":"FileField"}},{"__typename":"PageRecord","slug":"financial-governance-courses","title":"Financial Governance Courses","_modelApiKey":"page","_publishedAt":"2023-06-27T15:20:24+02:00","contentText":"","text":"Get up to date with NanoLearning courses containing important courses in anti-money laundering (AML) and anti-bribery and corruption (ABC).","image":{"url":"https://www.datocms-assets.com/64114/1648800947-junglemap_code-of-conduct_course.jpg?crop=focalpoint&fm=webp&h=600&w=928","alt":"Image of empty conference room ","height":1334,"width":2000,"blurhash":"LeE{|WofWWt7?wayWCofRPayf6jt","blurUpThumb":"data:image/jpeg;base64,/9j/4AAQSkZJRgABAQAAAQABAAD/2wCEAAoHBwgHBgoICAgXDRUUGBIcFgsNDhMNDREYFxgZGBYTFiEaHysjGh0oHSEWJDUlKC0vMjIyGSI4PTcwPCsxMi8BCgsLDg0OHA0OFC8dFhw7Ly8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vL//AABEIABEAGAMBIgACEQEDEQH/xAAYAAEAAwEAAAAAAAAAAAAAAAAAAQUGA//EACAQAAEEAQQDAAAAAAAAAAAAAAABAgMEBRESMzQGIjL/xAAZAQABBQAAAAAAAAAAAAAAAAABAAIDBAX/xAAZEQADAAMAAAAAAAAAAAAAAAAAAQIDEhP/2gAMAwEAAhEDEQA/ALmaymp0Sz6IZqXLtazcqkQeRQOTaqjnmgiUUaK5ZY+DRQZu/na7IvoC7wDSikt9dSqr8gBnMtInKcIADImf/9k=","colors":[{"hex":"#14578F","__typename":"ColorField"},{"hex":"#9BACB3","__typename":"ColorField"},{"hex":"#914E72","__typename":"ColorField"},{"hex":"#01467F","__typename":"ColorField"},{"hex":"#7CA6C5","__typename":"ColorField"},{"hex":"#64533B","__typename":"ColorField"}],"__typename":"FileField"}},{"__typename":"PageRecord","slug":"productivity-courses","title":"Productivity Courses","_modelApiKey":"page","_publishedAt":"2023-06-27T15:20:19+02:00","contentText":"","text":"Boost your productivity with NanoLearning courses in pre-boarding, onboarding and code of conduct. ","image":{"url":"https://www.datocms-assets.com/64114/1648800845-junglemap_information_security_awareness_for_all-employees_2022_2.jpg?crop=focalpoint&fm=webp&h=600&w=928","alt":"Image of woman working with laptop in her lap","height":1334,"width":2000,"blurhash":"LFB3vg-:9Z%gMxt7%MNG0KM|njIA","blurUpThumb":"data:image/jpeg;base64,/9j/4AAQSkZJRgABAQAAAQABAAD/2wCEAAoHBwgHBgoICA0UCgoXDg0NFQ4ODxUNEhEOFxMZGBYTIhUmHysjGh0oHSEWJDUlKC0vMjIyGSI4PTcwPCsxMi8BCgsLDg0OHA0QHDsdFhw7NS8vLzsvLy8vLy8vOzsvLy8vLy8vLy8vNS8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vL//AABEIABEAGAMBIgACEQEDEQH/xAAYAAEAAwEAAAAAAAAAAAAAAAAAAwUGAf/EACIQAAIBAwIHAAAAAAAAAAAAAAABAgMFEQQGFRYhMTIzcf/EABYBAQEBAAAAAAAAAAAAAAAAAAMCBP/EABkRAAMBAQEAAAAAAAAAAAAAAAABAiFBEv/aAAwDAQACEQMRAD8AzfAFCJzl9VY4RZTu1GawiWjrYxWQ/Oly5MXeLC9Msgs90XFOHQGhThLckVLyRZ0/WAH0KTObk7L6ABikf//Z","colors":[{"hex":"#3C3988","__typename":"ColorField"},{"hex":"#CDB6AC","__typename":"ColorField"},{"hex":"#93705F","__typename":"ColorField"},{"hex":"#653930","__typename":"ColorField"},{"hex":"#C18F7B","__typename":"ColorField"},{"hex":"#4C3229","__typename":"ColorField"}],"__typename":"FileField"}},{"__typename":"PageRecord","slug":"courses","title":"All courses","_modelApiKey":"page","_publishedAt":"2023-06-27T15:20:13+02:00","contentText":"","text":"Here are our courses – the list is updated monthly. Please contact us if you don't find what you're looking for."},{"__typename":"PageRecord","slug":"cookies","title":"Cookies","_modelApiKey":"page","_publishedAt":"2023-04-03T14:46:59+02:00","contentText":""},{"__typename":"PageRecord","slug":"pricing","title":"Pricing","_modelApiKey":"page","_publishedAt":"2022-12-23T16:13:17+01:00","contentText":""},{"__typename":"PageRecord","slug":"privacy-policy","title":"Privacy Policy","_modelApiKey":"page","_publishedAt":"2024-07-30T10:12:10+02:00","contentText":""},{"__typename":"PageRecord","slug":"nanolearning-courses","title":"NanoLearning Courses","_modelApiKey":"page","_publishedAt":"2024-03-11T15:04:22+01:00","contentText":"","text":"With our NanoLearning courses, you invest in your employees and let them thrive through efficient learning – with measurable effect","image":{"url":"https://www.datocms-assets.com/64114/1648812680-junglemap_placeholder_mobile_it_security.png?crop=focalpoint&fm=webp&h=600&w=928","alt":"Icon of Junglemap mobile with the text IT-security","height":1300,"width":638,"blurhash":"LHP6?S~W0g_3%hWWV?t7?wozMxWB","blurUpThumb":"data:image/png;base64,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","colors":[{"hex":"#E4AE4E","__typename":"ColorField"},{"hex":"#F7F4ED","__typename":"ColorField"},{"hex":"#79818A","__typename":"ColorField"},{"hex":"#17273B","__typename":"ColorField"},{"hex":"#EDCD93","__typename":"ColorField"},{"hex":"#29384A","__typename":"ColorField"}],"__typename":"FileField"}},{"__typename":"PageRecord","slug":"dpa","title":"Data Processing Agreement","_modelApiKey":"page","_publishedAt":"2023-04-28T13:38:57+02:00","contentText":""},{"__typename":"PageRecord","slug":"phishing-simulation","title":"Phishing-simulation","_modelApiKey":"page","_publishedAt":"2023-11-19T20:02:30+01:00","contentText":"

Strengthen your weakest link

\n\n

An organization's defense against cyber attacks is never stronger than its weakest link. Today, when 8 out of 10 successful attacks are due to human errors, all organizations need to prioritize their human firewalls as much as their digital ones.

\n\n

Through Junglemap's simulated phishing emails, your organization can train the employees' abilities to detect malicious emails, while at the same time getting a better overview of your organizations' overall performance and what you need to improve.

\n","text":"

Strengthen your weakest link

\n\n

\n","image":{"url":"https://www.datocms-assets.com/64114/1670924621-cybersecurity-padlock.jpg?crop=focalpoint&fm=webp&h=600&w=928","alt":null,"height":2975,"width":4460,"blurhash":"LSB;wTuNIpnj4TjFxuV@%gg4Rjoc","blurUpThumb":"data:image/jpeg;base64,/9j/4AAQSkZJRgABAQAAAQABAAD/2wCEAAoHBwgHBgoICAgLChYVDh0VDg0XGRUNDQ0PFx8aGBYTIhUaHysjGikoHRUiJDUlKC0vMjIyGSU4PTcwPCsxMi8BCgsLDg0OHBAOHDsoFiUvLy8vNS87LzU1Ly8vLy8vLy8vLy81Ly8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vL//AABEIABEAGAMBIgACEQEDEQH/xAAZAAEAAgMAAAAAAAAAAAAAAAAABgcCAwX/xAAhEAACAQMDBQAAAAAAAAAAAAAAAQIEBREDEjEhIjIzQf/EABYBAQEBAAAAAAAAAAAAAAAAAAQFA//EABsRAAICAwEAAAAAAAAAAAAAAAABAjEDBCES/9oADAMBAAIRAxEAPwDkxnPOMGqpeotOWF8Ja7Et/RGOpYXJNbTXI+gNRJFPVsKidZLtfIJ7X2KOhUNuAERlwqekWNHzMnywAeSyVqkYvftYAERoef/Z","colors":[{"hex":"#52AEB2","__typename":"ColorField"},{"hex":"#B8D7D8","__typename":"ColorField"},{"hex":"#52AEB2","__typename":"ColorField"},{"hex":"#036D71","__typename":"ColorField"},{"hex":"#A0E2D1","__typename":"ColorField"},{"hex":"#543335","__typename":"ColorField"}],"__typename":"FileField"}}],"pageData":{"seo":{"__typename":"SeoField","title":"Search","description":"Search all insights, courses and all..","image":null},"_allSlugLocales":[{"locale":"da","value":"soge","__typename":"StringMultiLocaleField"},{"locale":"en","value":"search","__typename":"StringMultiLocaleField"},{"locale":"fi","value":"haku","__typename":"StringMultiLocaleField"},{"locale":"nl","value":"zoekopdracht","__typename":"StringMultiLocaleField"},{"locale":"no","value":"sok","__typename":"StringMultiLocaleField"},{"locale":"sv","value":"soka","__typename":"StringMultiLocaleField"}],"searchTitle":"Search","content":[{"__typename":"SearchBlockRecord","searchBoxText":"Search for courses,insights and more","searchButtonText":"Search","allText":"All","coursesText":"Courses ","insightsText":"Insight","othersText":"Others ","loadMoreText":"Load More","noDataText":"No Data Available","cardsToShow":"2","cardsToExpand":"3"},{"__typename":"FullwidthshorttextRecord","title":"Search page","preamble":"","blockHasGradient":false,"media":null,"calltoaction":[],"chooseBackgroundColor":{"hex":"#E6B55D","__typename":"ColorField"},"gradientShade":{"hex":"#264940","__typename":"ColorField"}}],"__typename":"SearchPageRecord"},"language":"en"},"stuff":{"0":{"locale":"da","value":"soge","__typename":"StringMultiLocaleField"},"1":{"locale":"en","value":"search","__typename":"StringMultiLocaleField"},"2":{"locale":"fi","value":"haku","__typename":"StringMultiLocaleField"},"3":{"locale":"nl","value":"zoekopdracht","__typename":"StringMultiLocaleField"},"4":{"locale":"no","value":"sok","__typename":"StringMultiLocaleField"},"5":{"locale":"sv","value":"soka","__typename":"StringMultiLocaleField"}}}