Challenge.

While technical measures are important, at the end of the day people are the most critical link in the chain. Cybercriminals are masters of deception and all it takes is a moment of carelessness for the damage to be done. With this in mind, the Südzucker Group wanted to introduce an awareness programme that was engaging, realistic and would have a lasting impact. The solution? A multi-lingual, efficient and sustainable programme that could be adapted to the group’s international sites and that would seamlessly integrate phishing tests and training courses into day-to-day business to determine a security concept that minimises risks and transforms employees into an impenetrable line of defence against cyberattacks.

It was clear from the off that a security awareness programme would need to be implemented strategically and thoughtfully. Bechtle supported us every step of the way—from the initial consultation and campaign planning to defining a roadmap that will take us through to 2026. We needed a reliable partner that cooperates with KnowBe4 so that we could easily overcome the challenges involved with setting up the platform and any new requirements could be implemented in a snap.

Patrick Laier, Senior Information Security Manager – Risk & Awareness, Südzucker AG

Solution.

Südzucker wanted to use one of the leading security awareness platforms, KnowBe4, but the company also needed a good concept to support the roll out of the solution. Bechtle took on the strategic implementation, handling everything from the introduction and training courses to continuous optimisation. Working with Südzucker, the IT company developed a training programme based around specific risks. For the phishing simulations, Bechtle reviewed a variety of templates, customised them to the company’s requirements, translated them into multiple languages, and rolled them out at Südzucker’s locations worldwide. A total of 7,500 employees were then assigned specific e-learning modules which included realistic phishing simulations. The result? After the first campaign, the click rate dropped from 24.7 to just 3.7 per cent. However, raising awareness takes more than just one online training session. Bechtle will ensure that the programme is a living organism that grows and develops and quarterly reports, regular strategy updates and a dedicated landing page that employees get redirected to after a misclick ensures long-term learning success. User groups that are deemed to be particularly at risk receive targeted follow-up training to ensure security awareness becomes engrained at Südzucker.

Business benefits.

  • Targeted awareness trainings sensitise employees, helping them know what to do when faced with cyberthreats.
  • The managed service model is efficient as Bechtle takes on the design, implementation and evaluation of the training courses.
  • Detailed analyses deliver valuable insights for the management of measures and the continuous improvement of the campaigns.
  • Realistic phishing tests help identify security risks early on and minimise the probability of a successful attack.
  • Internationally aligned, the solution can be flexibly adapted to international locations with multi-lingual and country-specific content.
  • Future-proof programme  that boosts security awareness through recurring campaigns.
  • Tailored training courses are designed to meet the specific employee needs.
  • Flexible rollouts ensure training is seamlessly integrated into the working day.