4
Prompts
The concept of prompt has different names: cue, trigger, call to action,
request and so on, and they all have the purpose to remind and tell people
to "do it now". A good example is the password strength meters reminding
people to come up with better passwords as and when they create them.
When designing your ransomware awareness campaign, it is important
to consider where prompts may be used, i.e.:
•
When users join the company, educate them about the extortion threat
•
Notes about latest phishing scams
•
Phishing detection warnings in user's email clients (i.e., notes such as "are you sure you can trust
this link / attachment?")
BUILDING YOUR CAMPAIGN
When it is possible to combine the three elements of motivation, ability and prompts, changing
behavior is a much more likely outcome than just spreading awareness content and hoping for a result.
MOTIVATION ABILITY PROMPTS
Taking the above into account, we suggest the following steps for your cyber extortion awareness campaign: