Speaker
Description
Cybersecurity threats continue to evolve at an unprecedented pace, yet organisations across Europe struggle to translate regulatory mandates into sustainable, impactful awareness-raising initiatives. The human factor remains the critical link in cybersecurity defences. Building a strong cyber-aware culture is complex, resource-intensive, and often neglected. AR-in-a-Box, ENISA's practical methodology and toolkit, offers a proven, EU-wide solution to this critical gap.
The regulatory landscape has shifted dramatically. NIS2 Directive, GDPR, DORA, and the Cyber Resilience Act now mandate that organisations design and implement robust cybersecurity awareness programmes—yet many lack the tools, guidance, and structured approach to do so effectively. Public sector institutions, critical infrastructure operators, financial entities, and SMEs are scrambling to build programmes from scratch, often duplicating effort and missing best practices.
AR-in-a-Box bridges this gap by providing a comprehensive, methodology-driven framework that transforms compliance obligations into actionable, engaging awareness initiatives.
Developed by ENISA, AR-in-a-Box is a free, open, and scalable toolkit comprising:
- - Strategic methodology for designing awareness programmes aligned with organisational risk and objectives
- - Ready-to-use templates for campaigns, communications, and key messages
- - Interactive resources including games, simulations, tabletop exercises, and e-learning modules
- - Measurement frameworks with KPIs to evaluate programme effectiveness and demonstrate impact
- - Crisis communication guidance for incident response and post-incident learning