For anyone who has invited Google Home, Amazon Echo, or other intelligent personal assistant devices into your home, the effect can be, well, disarming. Alexa (on Amazon Echo) likes to be addressed by name, while Google Home responds to “OK, Google” as the conversation starter. These are two of the leading intelligent personal assistants on the market, designed to help you manage your life, stay on top of your hectic schedule, and respond to your in-the-moment need for all types of information. And they’re just getting started.

Whichever of these “assistants” you might have welcomed into your home, it’s an intriguing taste of where artificial intelligence (AI) is at, and a portent of where it might be headed. Google Home can do everything from calling out the weather forecast for the day, to managing your shopping list, to telling jokes, to hauling out a definition of whatever new terminology might be puzzling you. She can recognize your voice, so with more than one household member talking to her, she can personalize better to the individual. If on occasion you ask her something that’s beyond her reach, she might respond that “I’m sorry, I don’t know how to help with that yet”, but, given the range of things she can help with, that “yet” at the end might feel just a little ominous.

 And that’s the exciting and maybe even scary thing. The “intelligence” of AI is growing all the time. And AI is out there in many forms, from Amazon’s product recommendations to self-drive cars.

Let’s step back for a minute, though, and clarify what exactly AI is.

AI is a broad umbrella term for making software simulate the things that humans can do, like solve problems, play chess, or drive a car, and ultimately do those things better and faster than humans. In other words, AI is about building machines capable of intelligent behavior. The scope of AI is broad, with AI powering features on your smartphone, in self-driving cars, in your Amazon recommendation list. And then there are the amazing new advances that we haven’t figured out yet that might change our world dramatically in the not too distant future. 

Because of its scope, we have different categorizations of AI, from “narrow” and “weak” AI to “general” AI. Narrow is machine intelligence that specializes in just one area, such as chess or driving. And this is the kind of AI that some predict will result in a huge number of jobs being replaced. General AI, at the other end of the spectrum, refers to AI systems that can theoretically handle any task – just like human intelligence; such systems are a lot less common than their narrow AI cousins.

There are lots of exciting advancements in the AI field, including in the learning space. At Learning Technologies 2017, Donald Clark offered insight into a few of the emerging examples of AI at work in learning. From the online tutor bot that successfully supported students through a semester in an AI module at Georgia Tech, without the vast majority of students realizing it wasn’t a human, to the AI “student” that performed in the top 20% of students the University of Tokyo entrance exams, it’s clear that AI is not only creeping into learning, but has huge potential in terms of application.  

And while these types of educational projects may not be very common, aspects of AI offer several affordances that can be used today in learning. Everyday apps such as Netflix, YouTube and Amazon use AI to make personalized suggestions or recommendations to us based on our prior activity, our usage patterns, repetitions, and so on. This kind of personalization is readily applicable in learning, guiding learners to what to study next based on previous usage and history.

Data can also help uncover better ways to design learning – helping to identify students who might be at risk of failure, pinning down what’s working, what’s not, what’s needed, and how to improve our teaching and learning approaches. And with robot writers offering a future where content is produced in a different way, the possibilities are huge for learning environments that utilize the best of system-based and human-based intelligence. 

So, if you’re involved in learning, perhaps it’s time to start looking at where, what, and how AI can enhance the way we design, develop, deliver, and optimize workplace learning. AI, along with clever use of data, has much to offer in helping us shape more powerful user-centered experiences that meet the needs and wants of modern learners and the changing nature of work.

And while there are certainly some things that your virtual home assistant can’t assist you with yet, one can’t help thinking that the “can’t help” response may soon become a thing of the past.

If you would like to discuss how Intuition can help bring your learning programs to life, please email info@intuition.com. 

Earlier this year Facebook’s Chief Security Officer, Alex Stamos, courted controversy when he criticized the cybersecurity industry for a lack of empathy. The security community, he said, must take a more people-centric approach in developing technologies that can be more easily used in a secure manner.

This lack of human understanding is endemic in cybersecurity. Many organizations continue to see cyber-threats as solely technological in nature and consequently respond by investing in technical controls only. Meanwhile, little is done to raise cybersecurity awareness or promote safe online behaviors, as it is common for non-technical employees to be looked down upon as “buggy” and unfixable.

According to a recent UK government cybersecurity survey, 40% of large organizations don’t train employees on cybersecurity best practices. This overreliance on technology for cybersecurity is patently wrong and is demonstrated by the increasing number of security breaches caused by human failure.

Even where an organization does make efforts to raises staff awareness of cybersecurity, they frequently take the form of routine, tick-box training programs, which lack the human understanding necessary to promote safe cybersecurity practices.

High-quality cybersecurity training is the quickest and most cost-efficient strategy for an organization to improve cyber resilience.

Employee education reduces the risk of human error, which according to recent scientific research is responsible for nearly 25% of all cybersecurity failures. It also brings employees into the defensive fold by arming them with the knowledge they need to actively detect and respond to security breaches. For example, the 2016 cyber-heist of Bangladesh Central Bank was first noticed by a vigilant employee who spotted a typo in a wire transfer. This “human breach detector” ultimately saved the bank over one billion dollars.

However, to reap these rewards, we need to fundamentally change how we address the human aspect of cybersecurity. We need to show more empathy for people by demonstrating a deeper understanding of human motivation, by making training more accessible and personalized. Furthermore, to fully leverage the security value that knowledgeable employees can add, we need to open-up direct lines of communication between non-technical staff and those responsible for cybersecurity. It must be as easy as possible for employees at the coalface to provide the ground-up intelligence necessary for organizations to improve cyber defenses from within.

Make it Intrinsically Motivating

Many organizations and training vendors assume that workers will act in accordance with cybersecurity best practices solely because it benefits their employers to do so. This is not the case.

To effectively motivate people to adopt cybersecurity best practices, organizations must align personal and business objectives so that cognitive dissonance is minimized. This psychological phenomenon is the internal conflict that people experience when we behave in a way that is contrary to what we believe. It is why we are recalcitrant and reluctant when we are forced to do something that we believe is pointless and a waste of time.

By showing people that behaving safely online not only protects them professionally but also personally, this internal conflict will be reduced and people will be more motivated to learn.

Make it Convenient

According to Basex, two out of three workers feel that they don’t have enough time to get their work done. While Gallop research suggests that people have as little as 1% of their working week to focus on learning and development.

Learners are overwhelmed. There is so much content and so little time.

Empathetic cybersecurity training takes this into account by providing on-demand content in bite-sized chunks. This enables employees to take advantage of the downtime between meetings and other work commitments to build knowledge and skills in small segments.

Convenience is further enhanced when learning is accessible via mobile devices, as this allows people to study while traveling or away from the office.

Personalize It

Different individuals and groups will be subject to different cyber threats. The C-Suite for example are more at risk to “whaling” attacks than rank and file staff, while healthcare employees are more at risk to ransomware than those within the construction industry. Therefore, the first step in personalizing training programs is to provide content that is specific to role, industry and location.

The next step is to personalize training based on learning styles and proficiency. Everybody learns differently, some people like to watch, others like to listen, some like to learn while traveling while others prefer to study at their desktop computers.

Likewise, individual employees will have different levels of knowledge and skills. For example, an employee may have detailed knowledge on phishing emails, but does not know how to respond in the event of a security breach. Alternatively, another employee may know what to do after a security breach occurs, but is completely unaware of the security issues when connecting to public WiFi.

Until recently, customizing learning to a person’s needs was the stuff of science fiction. However, advancements in Data Science have made personalized training a reality. Intuition, for example, has partnered with CybSafe to deliver an intelligent cybersecurity software solution that learns as the learner learns. This data-driven training and awareness platform tracks a wide range of user behaviors and continually customizes how training is presented, making it most appropriate for people to be able to assimilate, thereby increasing the likelihood of positive behavior change.

Ground-Up Intelligence

For people to be fully integrated into the cyber defensive fold and become another layer of security by detecting and responding to threats, we need to open effective channels of security-specific communication.

One example is a one-click report button that integrates with email applications and allows users to immediately report suspect emails. Another possible solution is a dedicated instant messaging line that allows users to communicate directly with their IT security team.

By inviting, listening and responding to feedback, organizations can identify the root causes of unsafe cybersecurity behaviors. For example, end-users might find it too difficult to access internal systems and consequently turn to unapproved cloud services to get their jobs done. The removal of security barriers such as this is an important step in promoting safe cybersecurity practices.

Organizations who gather ground-up intelligence also improve their capacity to detect and respond to attacks by leveraging the sensory abilities of each individual employee to create a “neural safety net”. This as we saw with the Bangladesh Central Bank can be massively beneficial.

The establishment of efficient security-specific communications between end-users and security professionals along with effective employee education can transform people from the weakest link in the security chain into the first line of defense.

Conclusion

Good cybersecurity is about people and technology working together in unison to reduce cyber risk. However, for this to happen, organizations need to show empathy not only in how they make technology but also in how they train and equip their employees to respond to cyber-threats. For if, we become more attentive to the needs of people, they will in turn show greater care for the protection of our digital assets. That way, everybody wins.

Intuition – Securing Your Company Culture

Intuition is a leading knowledge solutions company. We work with our clients to reduce cyber risk exposure through unrivaled employee education.

Our holistic approach to the human aspect of cybersecurity includes training solutions for both software developers and non-technical staff, so that your organization can make and use technology in a safe and secure manner.

Webinar

Intuition is hosting an expert webinar on November 22nd to discuss the human aspect of cybersecurity. To register, please click here.

The General Data Protection Regulation (GDPR) is the most significant overhaul of European Union (EU) data protection legislation in over 20 years. Amongst other things, it is intended to provide better protection to individuals and to give greater certainty to organizations in navigating data protection across EU member states.

However, as with all new regulations, you could be forgiven for viewing the GDPR as an expensive, time-consuming constraint on free enterprise. You might see the penalties for non-compliance and think that this is just another risk to your business, your employees and your career.

We are not denying this, the penalties for a major compliance failure under the GDPR are significant (up to €20 million or 4% of global annual revenue). However, our view is that these fines, however hefty, don’t fundamentally up the ante. Security stakes were already as high as they could be.

For even without regulatory penalties, a major data breach could mean potentially terminal financial, operational, and reputational consequences for a business.

As the scale of the cyber threat is revealed, organizations should welcome the data security requirements laid down by the GDPR as an opportunity to reduce the risk of data breaches. After all, if an organization’s data is compromised, regulatory fines may be the least of its worries.

GDPR – A Welcome Wake-Up Call

Data breaches impact an organization’s reputation and consumer trust. They affect its financial value – Yahoo’s well publicized data breach cost the company and its shareholders
$350 million in its merger with Verizon.

Data breaches threaten strategic information, monetary assets and intellectual property. They can even limit an organization’s ability to perform daily tasks – we all remember the NHS hospitals that were unable to perform scheduled surgical procedures in the aftermath of the WannaCry ransomware attacks.

As cyber threats continue to grow and evolve, it is very likely that costly data breaches will become more frequent. Consequently, it is surprising that there continues to be a general lack of cybersecurity readiness within many organizations. Accenture’s State of Cybersecurity and Digital Trust 2016 report found that when it comes to cybersecurity, there are clearly gaps between where most organizations are and where they need to be.

So, while the GDPR introduces severe penalties for compliance failures, it will also force organizations to pay more attention to data security in the face of the looming cyber threat.

The Implications of GDPR for Data Security

The GDPR will replace the various legal interpretations of the current EU Data Protection Directive with a standardized, pan-European set of requirements about how organizations must manage data on their employees, customers, and other relevant stakeholders.

Data security is just one element of a broad data protection framework laid down by the regulation. However, while it’s by no means the only consideration, it’s an important one.

Article 5 of the GDPR calls for personal data to be processed in a manner that ensures the appropriate security of such data, including protection against the risk of destruction, loss, alteration, and unauthorized disclosure or access.

However, this is as prescriptive as the GDPR gets. The regulation does not define exactly how an organization should ensure that protection. Rather, it requires that organizations implement controls that are “appropriate” to its level of risk – a clear nod to risk-based approaches to cybersecurity.

Risk-Based Security

Risk-based security programs provide a framework for the prioritization of threats. Organizations evaluate the individual risks they face by considering two factors: the likelihood that a specific event will occur combined with any impact that the event may cause. The result determines the significance attributed to each risk.

Organizations can use this basic framework not only to increase cyber-defenses in prioritized areas but also to reduce security where the level of risk does not justify security controls that can constrain business performance.

A detailed understanding of risk can act as both a business enabler and a defensive measure. Some areas of a business can act more quickly and with greater flexibility, while other riskier areas will require more protection, even at the expense of performance.

After risks are identified and classified, organizations can mitigate the most serious data security risks by implementing a security strategy that protects data with appropriate technological deterrents, policies, and training. This approach also prepares organizations for the worst cyber risk scenarios with comprehensive intrusion detection and response plans.

Just the Beginning

The GDPR comes into force in May 2018 and coincides with similar data protection legislation initiatives throughout the world. In the United States, the New York State Department of Financial Services recently enacted new cybersecurity regulations and discussions are progressing for similar regulations at a federal level. Also, the Cyberspace Administration of China recently issued a draft policy on new regulations designed to improve data security. These developments indicate the general appetite amongst governments worldwide and other regulatory authorities for change.

The Internet is often compared to the Wild West, a lawless frontier where some individuals take advantage of the system to benefit themselves at the expense of others. We should feel reassured at the prospect of data protection regulators riding into town to enforce the law in the name of a safe online environment where both society and commerce can flourish.

How Can Intuition Help?

Intuition is a leading knowledge solutions company. We work with our clients to reduce cyber risk exposure through unrivaled employee education.

Our holistic approach to the human aspect of security includes training solutions for both software developers and non-technical staff, so that your organization can both make and use technology in a safe manner.

We can also assist organizations to meet the broader data protection training requirements described by the GDPR.

The US military is one of the most cyber-secure organizations on the planet. However, it was not always the formidable digital fortress that it is today. Hard lessons had first to be learned.

Back in 2008, a seemingly innocuous USB stick was picked up in the carpark of a Department of Defense facility and ultimately found its way into a laptop attached to the United States Central Command. The USB drive was loaded with malicious code that spread rapidly through sensitive networks causing what one senior Pentagon official called the “worst breach of US military computers in history.”

This incident was just one of a litany of harmful breaches that together became a catalyst for change. Beginning in 2009, US cybersecurity strategy was completely overhauled. Leadership was established, networks were consolidated, and technology was upgraded. Perhaps most significantly, actions were taken to minimize the risk of human error.

Quoted in the Harvard Business Review, Admiral Mike Rogers, head of US Cyber Command, confirmed that “we have gone beyond focusing on just the tech piece here, it’s about ethos. It’s about culture. [It’s about] how you man, train, and equip your organization.”

The Human Vulnerability

Cybersecurity breaches are an enormous problem for business. In 2016, the Ponemon Institute analyzed 383 companies in 12 different countries and found that the average total cost of a breach was $4 million, an increase of 14% over the previous two years. Add to this the potentially irreversible damage that a security breach can cause to a business’s reputation and consumer trust, and it’s easy to see why cyber risk is top of the strategic agenda.

But how should companies act to reduce their cyber risk exposure? Experts talk about the need to address the three pillars of cybersecurity; technology, policy, and people.

The role of technology is generally well understood and can range from simple things like electronic ID cards to sophisticated network firewalls. Policies are the rules and guidance that an organization puts in place to set expectations for employee conduct. Common examples include protocols governing password usage and social media activity. The quality and effectiveness of policy can vary from organization to organization, but in general, this too has been well addressed.

The human aspect, however, is a chronically neglected element of cyber defense. In our experience, many companies simply ignore or overlook people-related cybersecurity. Often, these companies simply don’t have the time, resources, or expertise to address it. Other companies conduct some form of training, but it’s an ineffective, box-ticking exercise that does nothing but undermine the importance of cybersecurity in the minds of participants.

The inadequacy of these defenses is not lost on hackers. They recognize that humans are the weakest link in the security chain and target employees with a wide range of nefarious tactics, including phishing, spear-phishing, and other forms of social engineering.

The extent of this security gap is reflected in IBM statistics that point to the involvement of human error in 95% of security breaches.

The lesson here is clear. Companies who are serious about reducing their cyber risk must take their lead from the US military. They must effectively address the human aspect of cybersecurity.

Security Culture

Any company seeking to minimize the risk of human error will need to establish a strong security culture, a shared set of ideas and behaviors that reflect and embody cybersecurity best practice.

Cultural change in any shape or form is a complex process. There are however several basic building blocks that organizations can put in place in attempting to embed a security culture:

Establish a positive tone at the top

Cybersecurity is a C-Suite level issue. People naturally respect and are influenced by authority. Employees, therefore, are much more likely to conduct themselves in a cyber-secure manner where cybersecurity is actively promoted by senior leadership.

Make people accountable for their actions

Accountability is also important. Under the newly formed US Cyber Command, all individuals are responsible for their own behaviors and all commanders are responsible for the security performance of their units. Tracking and reporting of cyber performance has been established, and individuals stand to be disciplined in the event of negligence. Companies too should seek to make it the norm that all individuals are accountable for their cyber behaviors.

Make security usable

Security usability is an important enabler for cyber-secure behaviors. Technologies and processes that are difficult or confusing to use will damage productivity and increase levels of irritation, motivating employees to bypass security measures in search of an easier life. Take passwords, for example. It is unlikely that employees will use sufficiently complex passwords where company protocol requires that they change their access details every week. Companies should ensure that security technologies and processes are as intuitive and easy to use as possible.

Prioritize continuous education

Effective employee education is essential for behavior change.  Companies should first seek to establish a baseline understanding of key risk areas. Make the message relevant by using straightforward, non-technical language and personal examples (people are more likely to care about cybersecurity when they perceive their own assets and loved ones to be at risk).

Following initial training, it is important to promote knowledge retention and behavior change with continuous education. Once-off training simply is not sufficient to ensure people remain aware of the risks they face. In fact, it is proven that people forget nearly 70% of what they’re taught within 24 hours of a training session.

Simulated cyberattacks are an effective method for keeping cybersecurity “top-of-mind” and promoting behavior change, especially when poor performers are delivered directly into corrective training. Regular security alerts and updates are also recommended for keeping employees informed of the rapidly evolving threats that they face.

Measure behavioral change

There is an old business adage that suggests that companies only get what they measure. The US Cyber Command have operationalized this sentiment with a simple scorecard system designed to facilitate accurate reporting on cyber performance and transparent accountability across the organization.

Companies too should look to develop basic of behavioral metrics as a bellwether for cultural change. Some behaviors can be measured using a simple observational method, but other behaviors, such as the propensity of employees to click on unknown e-mail attachments, will require some form of technology solution to measure.

Cyber-secure organizations should report on these core metrics on a regular basis and use the data to facilitate informed decision making on cyber strategy going forward.

Conclusion

If the Pentagon’s experience teaches us anything, it is that technology alone cannot protect the business world from the growing cyber threat.

Companies should look instead to embrace a holistic security strategy that treats people as equal in importance to technology and policy in securing their cyber defenses.

How Can Intuition Help?

Intuition is a leading knowledge solutions company. We work with our clients to reduce cyber risk exposure through unrivaled employee education.

Our holistic approach to the human aspect of security includes training solutions for both software developers and general staff, so that your organization can both make and use technology in a safe manner.

If unsafe cybersecurity practices are an issue for your organization, please contact us at cybersecurity@intuition.com to learn how Intuition can help you change behaviours and reduce cyber risk.

Intuition is pleased to announce that we have teamed up with CybSafe, the cybersecurity specialists, to offer an innovative solution to people-related cybersecurity challenges.

In a world where cyber attacks are increasing in frequency, severity and sophistication, this partnership will enable Intuition to assist our clients to reduce cyber risk through innovative employee education.

Recently mentioned in HSBC’s Trust in Technology report and named by TechWorld as one of the UK’s most promising cybersecurity start-ups, CybSafe’s GCHQ-accredited training platform is  revolutionizing cyber education by harnessing behavioral analytics to deliver contextual, threat-based awareness.

“We are excited to partner with Intuition, a leader in the knowledge solutions industry that shares the same values and approach to employee education as CybSafe. Information security continues to be one of the biggest threats faced by businesses today but, through this partnership, Intuition customers can count on cyber aware employees to be the first line of defence against cyber criminals. CybSafe prides itself on partnering with best-in-class organizations that align with our aim for reducing cyber risk and this partnership is a prime example of that,” commented Oz Alashe, CEO of CybSafe.

“The speed of technological development has created a dangerous knowledge gap when it comes to safe cybersecurity practices. In addressing this deficit, organizations need to do more than just perfunctory, compliance-type training. CybSafe’s data-driven approach is a step-change in cyber education that will enable Intuition to work with our clients to deliver real-behavior change” added Niall Darby, Chief Operating Officer at Intuition.

About Intuition

Intuition is a leading global knowledge solutions company. With over 30 years’ experience and offices located worldwide, we have developed and deployed our award-winning solutions for many of the world’s leading corporate and largest public-sector organizations. Our products and services include off-the-shelf and bespoke eLearning, classroom training, learning management systems, mobile apps, and advisory services.

About CybSafe

CybSafe is a leading provider of cyber security awareness training that focuses on better protecting people from cyber threats, both at work and at home. It uses a cloud-based platform grounded in psychology and behavioral science, which has been built to address the ‘human factor’ of cyber security.

CybSafe’s intelligent software harnesses collective lessons across the cyber security community in a low cost per-user subscription to help businesses of all sizes improve cyber security behavior and reduce cyber risk both internally and within its supply chain.

Our GCHQ-accredited software helps businesses and organizations to mitigate cyber risk with greater certainty, greater impact, and more cost effectively. In 2017, CybSafe was admitted into Level39, the prestigious technology accelerator based in Canary Wharf, London.

For more information on how Intuition can help your organization with cybersecurity challenges, email info@intuition.com or visit our cybersecurity page for a demo.

Unless you were hiding happily under a rock the summer of 2016, you can’t have failed to notice the plethora of Pokémon hunters that emerged following the release of Pokémon GO last July.

It seemed like everyone was doing it: wandering around outside, mobile in hand, with the sole intention of throwing Poké Balls at an unsuspecting Squirtle or Charmander, which were themselves digital inscriptions on an otherwise familiar (and very real) landscape.

But wait, what has this got to do with workplace learning solutions?

If the Pokémon Go craze has taught us anything, it’s that augmented reality (AR) has the potential to catapult user engagement into a new stratosphere; anything that doubles, triples, or quadruples engagement should have the forward-thinking L&D manager sitting up to take note. AR may extend well beyond a tool for engagement in the workplace. In 2013, Gartner predicted that AR will become an important workplace tool. In that report, Tuong Huy Nguyen defined AR as “the real-time use of information in the form of text, graphics, audio and other virtual enhancements integrated with real-world objects.”

Unlike Virtual Reality (VR) that immerses users in an entirely new digital environment (via headsets or special eyewear), AR meshes the real world with computer-generated objects via glasses, a headset, or a mobile device like a tablet or smartphone. AR overlays digital content like schematics, 3D animations, videos, images, or audio onto the real world and invites the user to interact with this digital content in a multisensory way. This additional information is triggered via the device’s camera and sensors. The experience is not as immersive as VR but already is delivering learning enhancements in a number of markets, including field based industries like oil exploration, mining, energy and pharmaceuticals.

Using AR for Augmenting Learning

A wide range of companies have been exploring and experimenting with AR for some time now from Sony, Microsoft, and Google to Intel and Apple. AR as a concept is not new. The term “augmented reality” was first coined by Boeing in the early 1990s, and in 1992, inventor Louis Rosenberg developed one of the earliest AR systems for the US Air Force.

Field-based industry learning applications make sense. AR presents opportunities for those working in hazardous workplaces and industries like oil exploration, mining, energy, and pharmaceuticals. Manufacturers of smart glasses are releasing hazardous location glasses, a technology ideal for environments where employees need to be hands free, have access to safety information, assistance tools, or remote assistance. Market research firm ABI Research said earlier this year that it expects AR in enterprise applications to “hit an inflection point in 2018, with smart glass shipments growing to 28 million in 2021.”

And while Google glass may not have cracked the consumer market for AR in 2014, consumer facing applications will grow. In fact, any content that is datable or static and would benefit from an additional content input or a unique perspective will be an ideal AR enhancement candidate from art and museum locations to journalism.

The potential for all educators is plainly significant and AR has many school-based applications. Hidden content in a History of Art lesson could transform a painting into a “talking portrait,” like in a Harry Potter movie, giving additional detail around sitter and artist while subjects like Math, Science, Engineering come alive through the movement, animation and fun that interacting directly with a live 3D model brings. AR features are perfect to support class materials.  This space is already filling up fast and there are a number of AR apps for pupils.

Evidence of Successful AR Learning
At the 2015 Augmented World Exposition, Santa Clara, California, Boeing electrical engineer Paul Davies shared the results of an internal study detailing how trainees performed when asked to assemble a mock wing for the aircraft manufacturer.

Three cohorts of learners were given three methods of training and instructions: one group received animated AR instructions displayed on a tablet, whereas the others got a static PDF on either a computer or tablet. Davies concluded that the AR-tablet group were 30% faster and 90% more accurate on their first attempts than the other groups. So while it is still early days for AR, studies like this one could point up a potentially effective learning future.

From Trends to Adaptation

AR is one of several learning trends attracting real interest in the learning community, typically appearing high on any L&D trends list, usually alongside VR. Not every trend, however, is destined for adaptation. The gamification trend rose quickly, and while many have integrated gamification successfully into their learning design, it has not gained the traction expected or predicted by now. How quickly AR will make it into general learning interventions remains to be seen. We need an uncomplicated path to development and application for this emerging technology, as well as an ability to imagine it into and around our learning challenges and solutions.

Making AR Useful
AR has the potential to enhance the human aspects of learning by offering a level of supplemental content and interactivity that accelerates understanding and comprehension in a range of settings. The supporting technologies are increasingly mobile and hands-free; environmentally and spatially aware; and, well, just downright smart.

AR is a paradigm shift for educators, working in sync with a number of other up-and-coming trends in digital learning. Take a moment now to consider how and where you might use AR to radically augment your learning programs. Watch the portrait come alive.

If you would like to discuss how Intuition can help your learning come alive, email info@intuition.com. 

Do you ever feel overwhelmed by the need to identify high-priority training needs for your people while at the same time being conscious that you need training that translates into real-value impact lasting well beyond the training intervention? Getting the right learning to the right people and producing durable results can be a challenge. Here are some quick tips to conducting the all-important needs analysis and eventually getting to breakthrough learning that will deliver what you and your people need.

Make Sure Training Is the Right Answer

Training produces results. We know this. However, remember that old adage “if the only tool you have in your toolbox is a hammer, then everything can look like a nail.”  Sometimes poor performance can be down to factors outside a knowledge and skills gap. It might be caused, for example, by environmental issues like a management culture that doesn’t support performance, where incentives may be misaligned, or it could simply be a problem around resources or tools within the environment. You must figure out pretty quickly what the causes of poor performance are in order to be sure that training will be an effective solution.

If you exclude the environmental issues, then poor performance is generally down to a lack of knowledge, a deficit of skills, a mix of these, or possibly a lack of motivation.  Generally speaking, training can target knowledge, skills, and sometimes motivation shortfalls.
Once you’ve established you’ve got a training need, then the next step is to start talking. A good place to begin is with the simple question “Why?”

Start with “Why?”

Whether your training requirement has come from a request from someone else in your organization or from your own analysis, always track down the why of it. That “why” will hopefully be a business goal.

Dump anything that sounds like an “order.” Cue: phone rings and a voice says, “Hey, we need two hours of training on Alpha learning concepts for Team Turin by end of quarter one.” Push back on a conversation starter like this with your own “Just tell me a little more about it. Why do you need Alpha learning concepts exactly?” And “What’s the driver behind your request?” Questions like this should help lead to an understanding of the business issues involved, ultimately resulting in a clear statement of business goals and outcomes.

Sometimes when we’re talking with colleagues about training, we feel obliged to “catch on” quickly, to “get it.” This can be detrimental to figuring out what’s really necessary. A simple technique is to ask for help understanding a point, “Can you explain to me how this works please, how Team Turin use Alpha learning concepts exactly? What do they need to do?” Stay with it until you get a clear picture of the changes that you are looking to bring about in your learners, department, or organization.

Caveat. Beware any training request that comes bearing a slide deck outline of the proposed course. While such material will be useful, alarm bells should go off because someone is trying to leap over your needs analysis. Start with the why and through some simple questioning figure out what’s really needed, what end results will look like, and how it might be measured.

Crystal Clear Goals

What you’re expecting from these steps include:

• Clear learning outcomes and goals
• A sense of what your metrics might be, for example, Team Turin will reduce customer care errors by 50% by end of next quarter
• Some design and delivery ideas as well as the core information to communicate 

Gathering Data

There has been a tradition in learning of data gathering. There are lots of methods to choose from, including staff surveys, consultations, interviews, records, and reports; all are ways and means of accumulating the data you need to make informed choices about training. In most cases, however, you simply won’t have the time. With a few carefully crafted questions, you can rapidly get to the answers, as long as you involve key stakeholders at the outset. And when we say data, we don’t mean all the data you can gather on just about everyone. You can’t do that. What you need to do is sample – get data from a representative sample of people.

Chain of Logic

Once you start getting data on board, you can start thinking about the shape of your solution. Keep a chain of logic working throughout your analysis phase. If you know what the business need looks like, let’s say it’s improving Team Turin’s audit results, you can quickly enough infer what actions or tasks people need to be able to do in order to improve these results.

Conclusion:
Remember where you started – your first step? Begin by establishing the business need underpinning the request and everything else will flow from there. Look at what people need to be doing, the behavior they need to demonstrate, and then gather just the data you need to identify if/what type of solution will resolve that need. Be conscious of the wider environment that people perform in and other factors that can impact their performance. Then, once you have honed in on a training need, move toward designing your solution by focusing always on the business goal or problem and the related performance/behavior needs. Maintain your chain of logic.

Intuition offer a wide range of digital content, platforms, and services to clients globally. We understand Needs Analysis and the process doesn’t have to be quite as painful as you imagine.

Why not set up a call with us today?

Check out our Cyber Security Top Tips to find out if your organization is fully protected against a cyber attack.

1)    Malware Prevention  Does everyone in your organization know how to recognize and handle phishing communications?

Scan for malware across your organization and protect all host and client machines with antivirus solutions that will actively scan for malware.

Make sure you have stringent policies in place around email, web browsing, removable media and personally owned devices.  Without a clear understanding of the risks and how to recognize potential threats, your organization is wide open to attack.

2)    Password Security  How strong is your password policy?

Simple things that may seem elementary are still extremely important when ensuring that everyone within your organization understands the implications of not following password security policies.  Make sure staff are aware of internal policies and enforce regular password updates with automated processes wherever possible.

3)    Network Security  How strong is your network perimeter?

Connecting to untrusted networks (such as the Internet) can expose your organisation to cyber attacks. A secure network that is robust enough to protect internal and client data is essential. It is extremely important to have strong ACLs (access control lists) on all network devices to prevent breaches by would-be hackers. Follow recognized network design principles when configuring perimeter and internal network segments, and ensure all network devices are configured to the secure baseline build.

4)    Secure Configuration   Does your organization have a detailed Information Security Policy?

A corporate policy and processes to develop secure baseline builds, and manage the configuration and use of your ICT systems are essential. Remove or disable unnecessary functionality from ICT systems, and keep them patched against known vulnerabilities. Failing to do this will expose your organization to threats and vulnerabilities, and increase risk to the confidentiality, integrity and availability of systems and information.

5)    User Privileges  How is provisioning and de-provisioning of systems access managed in your organization?

The number of privileged accounts with control access to audit logs should always be limited and regularly updated.  Monitor user activity, particularly all access to sensitive information and privileged account actions (such as creating new user accounts, changes to user passwords and deletion of accounts and audit logs). The danger of not managing this correctly can mean information falling into the wrong hands.

6)    Incident Management  How prepared are your incident response team if you come under attack?

You need to have an incident response and disaster recovery capability that addresses the full range of incidents that can occur. These incident management plans (including disaster recovery and business continuity) all need to be regularly tested. Be aware that your incident response team will need specialist training across a range of technical and non-technical areas to ensure they are fully prepared to handle any scenario.

7)    Monitoring  What is your monitoring strategy?

Your monitoring strategy needs to take into account previous security incidents and attacks, to contribute towards your organization’s incident management policies. Continuously monitor inbound and outbound network traffic to identify unusual activity or trends that could indicate attacks and the compromise of data. Monitor all ICT systems using Network and Host Intrusion Detection Systems (NIDS/HIDS) and Prevention Systems (NIPS/HIDS).

8)    Removable Media  How stringent is your policy?

The use of removable media is sometimes unavoidable, but if your policies around types of devices is not stringent enough, you can leave yet another area at risk to malicious attack.

Make sure your removable media policies control the use of removable media for the import and export of information.  Limit the types of media that can be used together with the users, systems, and types of information that can be transferred. Scan all media for malware using a standalone media scanner before any data is imported into your organisation’s system.

9)    Home and Mobile Working  Are your mobile staff protected?

In order to develop appropriate security policies that fully protect your organization you need to assess the risks to all types of mobile working (including remote working where the device connects to the corporate network infrastructure).

Train mobile users on the secure use of their mobile devices for locations they will be working from. Apply the secure baseline build to all types of mobile device used. Protect data-at-rest using encryption (if the device supports it) and protect data-in-transit using an appropriately configured Virtual Private Network (VPN).

How did your organization measure up?

If you’re concerned about the potential risk of a cyber attack on your organization, you cannot afford to be complacent, you need to make your systems secure immediately.

Intuition have worked with many of the world’s largest organizations to create exciting and innovative custom online training that is both visually and mentally stimulating to ensure maximum knowledge retention. 

In an age of information overload, we understand that when it comes to areas of high risk, a sheep dip approach is no longer good enough.  Using media rich games and simulations, we design, build and host  highly interactive and engaging courses which hold a user’s attention regardless of the subject matter.

We work with our clients to ensure that employees fully understand the content so that they can proactively and dynamically respond to risk in the everyday work environment.

Intuition is hosting an expert webinar on September 21^st to discuss the human aspect of cyber security. To register, please click here.