Security awareness training: working together to stay sharp
Security awareness training: working together to stay sharp.
This week our IT manager at NTI Cad & Company, Ruurd Koekebakker, h delivered a security awareness training to the entire NewArmstrong team. Not a remote theoretical session, but a practical training in which we were taken through actual risks and recognizable situations.
The reason is clear. In our projects, we work with sensitive data, multiple stakeholders and complex collaborations. This requires attention. Not only in systems and processes, but precisely in the daily actions of people.
Why it matters:
Where ten years ago a bitlocker on our server was the biggest risk, numerous risks have been added in recent years. And with the countermeasures to increase data security, the offensive side is also developing. We find that with AI data-phishing is becoming more and more common. And that with it they are even trying to circumvent all our security measures.
Currently, NewArmstrong:
- Use of Microsoft 365 / Entra security score and Intune for device and identity management
- Live monitoring via IT partner ( with:
- Device monitoring
- weekly Updates/patching
- Cloud-first architecture:
- Microsoft Sharepoint
- Microsoft Teams
- Autodesk Construction Cloud (project data)
- AFAS (financial data)
- Forced MFA (phising proof).
- Data leakage protocol in place
- replacement of devices when security patches are no longer available
Recognize rather than assume
During the training, the focus was on one key question: what do you see, and do you recognize it in time?
We worked with real-world examples. Consider phishing emails, unclear links and situations where information is shared without the need. Making this concrete creates something other than just knowledge. Recognition is created.
That is exactly the goal. Not everyone needs to be a specialist. However, everyone does need to be able to recognize doubt and act deliberately.
Awareness in daily work
What makes this training strong is that the translation can be made directly to our daily work.
- How do we share information in projects
- How do we handle access rights
- What to do when in doubt
- When do you escalate something
They are not exceptions. They are daily decisions.
Training in this as a team creates consistency. Everyone works from the same starting points. This makes working together calmer and more predictable.
Part of how we work
The training does not stand alone. It fits within how we organize projects. Our way of working revolves around structure, overview and demonstrable quality. Security is a natural part of this. Not as an isolated measure, but as part of the process.
That means we look not only at what we deliver, but also at how we work.
What it delivers
In the training, the effect is immediate. There is a sharper focus. Questions are asked more quickly. There is more awareness in how information is used and shared.
These are small changes in behavior, with great impact on the whole.
And that’s exactly where the value is.
