Information Security Awareness
Brussels Airlines, member of Lufthansa Group and Star Alliance, is the Belgian airline that offers the widest choice of flights to and from the capital of Europe, Brussels Airport. The company has 3,500 employees and 50 aircrafts operating some 300 flights daily, connecting Brussels to over 90 European and African destinations, as well as two destinations in the USA (New York JFK and Washington D.C.) , one in Canada (Toronto), and since March 2017, one in India (Mumbai).
Brussels Airlines offers cargo capacity on all its flights, commercialised by the Cargo Department. The airline also handles its own daily maintenance.
Brussels Airlines is legally obliged to inform all its 3500 employees of the existing guidelines on Information Security. Until recently they did this with documents, brochures, legal texts on the Brussels Airlines intranet, etc.
This project brought several challenges. On one hand we had to develop a course addressing different audiences (flying staff, ground personnel, aircraft technicians, office workers, etc.) and different cultures (Europe, Africa, North America and soon India). On the other hand, we decided to mix different topics: IT Security, PCI Compliance and Physical Security. Working with UNI-Learning brought added value on the project: they were able to translate our processes and procedures into four easy and short, understandable e-Learning modules. Furthermore our internal stakeholders (not used develop e-Learning) appreciated working with the UNI-team. Finally, participants return is also positive, and we see an increased awareness about IT Security and PCI Compliance within the organisation.Steffen Fobe - Senior Training and Development Officer (Brussels Airlines)
The goal was to make the available information much more accessible for the employees and at the same time presenting the content in the consistent brand identity of Brussels Airlines. In order to strengthen the information security awareness and to make the content more attractive, it had to contain a sufficient level of interactivity. Also, it had to be possible to check whether the “legal obligation to inform” had been fulfilled, by tracking and reporting who completed the course.
Despite the extra complexity of having to build the course in a modular way, with different target audiences per module, UNI‑Learning successfully realised all the project ambitions.