Cyber Clinics: Re-imagining Cyber Security Awareness

Abstract

Cyber Clinics are modeled after the methods used in teaching hospitals to perform triage and treatment in healthcare settings. Cyber Clinics are interactive, personalized workshops that provide education on the importance of protecting devices, data and identity from physical and digital compromise; Cyber-Medics offer recommendations on achieving this goal following triage sessions designed to help identify user knowledge and experience levels. This paper examines cyber security awareness training with different awareness methods based on measurements of time, cost, personalization, relevance and interactivity. Results illustrate the potential for the Cyber Clinic model to be an effective method for educating users about cyber security. Challenges in measuring efficacy and recommendations for expanding Cyber Clinics also are discussed.