Helsana is one of the leading health and accident insurers in Switzerland. Its employees deal with sensitive data and information on a daily basis. Helsana is aware of the sensitivity of the data and therefore makes security a top priority. A lived security culture and information security are essential for the company. For several years now, Helsana has been using e-learnings to train its employees. On the one hand, they use standardized e-learning courses that are tailored to the company by adapting individual terms. On the other hand, they have e-learning courses developed on very specific topics in order to respond even more precisely to the needs of the company and to train employees on specific topics and for specific target groups.
For several years now, Helsana has been using e-learnings to train its employees. On the one hand, they use standardized e-learning courses that are tailored to the company by adapting individual terms. On the other hand, they have e-learning courses developed on very specific topics in order to respond even more precisely to the needs of the company and to train employees on specific topics and for specific target groups.
Helsana strives for a motivating design with playful elements in order to train its employees in an entertaining and amusing way. The ability to customize the e-learnings and new developments were and are of great importance to them. This is why they chose TreeSolution as their partner for security awareness.
The collaboration with TreeSolution began in 2012 with a security culture measurement using the Security Awareness Radar® (SAR). This was then repeated regularly to identify weaknesses in the security culture and take targeted action to improve security.
Based on the results of the Security Awareness Radar® survey, TreeSolution worked with Helsana to develop new e-learning courses to strengthen the company's security culture.
Phishing attacks have increased rapidly in recent years and represent a major threat as phishing attackers use employees as a "gateway". To protect against phishing, it is therefore essential to strengthen the human firewall. For this reason, Helsana decided 5 years ago to develop a new e-learning course on phishing together with TreeSolution.
Since then, there have been a number of new developments on information security in general, on special topics such as cybercrime, or for specific target groups such as an e-learning course for external suppliers and partners. The latest development is an e-learning course on collaboration & cloud.
The primary objective of all e-learning courses is to ensure that all employees take responsibility for security in their working environment and act appropriately when handling data and information and the associated risks. This is achieved by repeatedly communicating the topics to employees through various channels. For example, Helsana has used and continues to use various channels (e.g. video clips, brochures, etc.).
It is also important to have a memorable brand design on all of the initiative's media in order to give it a visual face and thus help employees to better internalize and implement what they have learned.
The success of a training course depends on the motivation of the learners. In order to achieve the highest possible level of motivation, the learning content is structured according to the ARCS design model:
Each e-learning course follows this approach. The content is based on Helsana's existing content and materials and our standard content.
The implementation of e-learnings has been a complete success, with positive feedback from employees throughout. In addition, the e-learning training is supported by the management and the development is praised.
The security audits were also successfully passed and the auditor gave the measures a positive assessment.
"I think the e-learnings with examples are good."
"Short, cool, informative and varied e-learning courses."
"Good e-learnings (interactive, easy to understand, entertaining)."
"Very good e-learning courses."
"Awareness is constantly being raised and e-learning courses are always being offered. I think this is good and important so that at some point it simply becomes part of the job and is done automatically."
The collaboration will continue in order to further leverage the potential for improvement.