Risk-Based Education and Training

Acclaimed gaming industry thought leader Raph Koster writes, “Fun from games arises out of mastery. It arises out of comprehension. It is the act of solving puzzles that makes games fun.” Koster is challenging designers to get away from the predictable, and therefore boring mechanics of games, but he might just as well be talking to designers of employee education programs. An effective training program starts with an analysis of who in the company needs to be taught what, and at how deep a level of understanding based on each person's effect on or exposure to a given threat, and the level of risk that threat presents to the organization. Determining how to ensure the required understanding is as important as deciding who needs to know what.

The latest installment of OCEG's GRC Illustrated Series discusses a risk-based approach that will enable your organization to provide appropriate training and education to individuals across the organization based on factors such as role, geography, and their level of exposure to particular risk areas.