Information Security Training

This project is a data safety awareness training designed to help employees recognize and prevent common risks to company data within the workplace. Developed for a fictitious organization, Timmerman Industries, the course focuses on protecting sensitive information in everyday office environments.

In today's distraction-filled work culture, data privacy can be compromised through small, preventable actions—unlocked screens, unattended documents, unsecured devices, and suspicious emails. This training equips employees with practical strategies to safeguard company information and strengthen overall organizational security.

Most data breaches don't happen through sophisticated hacking—they happen through human error. Employees rushing between meetings leave screens unlocked. Sensitive documents sit unattended on printers. Phishing emails slip past distracted workers who click without thinking.

These small lapses create vulnerabilities that can lead to significant consequences: compromised client data, regulatory penalties, reputational damage, and financial loss. Traditional security training often fails because it focuses on policies rather than practical, everyday behaviors.

This training takes a different approach. Rather than lecturing employees on security policies, it places them in realistic workplace scenarios where they must identify risks and make decisions.

Key design elements include:

• Relatable scenarios — Situations employees actually encounter: stepping away from their desk, receiving unexpected emails, handling printed documents
• Decision points — Learners choose how to respond, seeing the consequences of both secure and risky behaviors
• Microlearning format — Short, focused modules that fit into busy workdays without overwhelming employees
• Practical takeaways — Clear, actionable habits employees can implement immediately

The goal of this training isn't just compliance—it's behavior change. By connecting security practices to real situations employees face daily, the course makes data protection feel relevant and achievable rather than abstract and burdensome.

This project demonstrates how instructional design can transform mandatory compliance training into an engaging learning experience that actually influences workplace behavior.