Polyus implemented Start AWR

2023: Start AWR Implementation

Gold mining company Polyus has implemented a continuous cybersecurity training platform Start AWR. Now employees are ready for possible information attacks - less often they open phishing links and download dangerous investments, more often they turn to the information security department for advice and report suspicious activities. Start X (Antifishing) announced this on November 8, 2023.

With the help of the Start AWR platform, the Polyus information security team conducts comprehensive work with employees. People take courses created taking into account the specifics of the company, and practice skills in practice, repelling simulated attacks. Simulated attacks are emails with dangerous attachments or links to phishing sites. The letters are compiled taking into account the knowledge of what makes employees fall for the tricks of intruders.

The results of working with employees are displayed in the rating model - this helps the information security department determine the level of risk and adjust access for each employee, as well as set up an individual information security training trajectory.

We understood exactly how to raise the level of awareness of employees, and Start AWR had all the necessary opportunities for this. This tool helped to realize our vision of how to increase the security culture in the company, "said Andrey Tikhonin, head of the information security department of the Polyus information security department.

For the efficient operation of Start AWR, the Polyus security team, together with the vendor and integrator, customized a standard set of courses and attacks, created a course "Security of critical information infrastructure objects," and also configured integrations with the necessary services and systems in the internal infrastructure.

According to world statistics, 82% of information security incidents in 2022 occurred due to the actions of employees. I am glad that experts from the Polyus security team perfectly understand this and act proactively - they develop a culture of information security within the company, including training employees to recognize attacks and respond to them correctly. With the introduction of courses and other technologies based on Start AWR, the number of calls to the Polyus information security department increased by 50% - employees became twice as likely to respond to suspicious messages and transmit them to the security department, - commented Sergey Voldokhin, Product Director Start X.

The implementation of Start AWR was carried out by the Informzaschita integrator together with the vendor and with the active participation of the Polyus security team experts.