Skip to main content

Explainer: Security heroes leaderboard

Identify security advocates and champions in your organisation based on their interactions with CybSafe

Written by Ben Chadfield

One of the best ways of improving your organisation's security culture is to identify who could be a Security champion. These champions can advocate for increased cyber awareness and to be a point of contact for colleagues to come to with questions.

The challenge is of course identifying who these people are.

CybSafe has made it easy for you to find out who is engaging with cyber security in your organisation with our Security Heroes leaderboard.


What is the Security heroes leaderboard and where can I find it?

You can access the Security Heroes leaderboard from Reports > Engagement > Security heroes.

Here you'll see all uploaded users on your CybSafe account and their security hero score.

At a glance, you can see who has been engaging most with cyber culture in your organisation.

Your people can also check their own score on their homepage. It shows them the top three Security heroes, their position and the people immediately above and below them. It also tells them who they're compared with: everyone in your organisation, or their own group if you've chosen one (see Compare people within their own group).


What if I do not want the leaderboard on my account?

We understand some administrators may not want the leaderboard to be viewable. It's simple to turn this off. Head to Platform settings in the left hand menu and disable the leaderboard.

Can I give the leaderboard our own name?

Yes. If your programme has its own name, such as "Security Champions", you can use it on the leaderboard tile on people's home dashboard and add your own badge. Head to Settings > Platform settings > Branding and use the Personalise the leaderboard section. Menus, reports and Slack messages keep the Security Heroes name. See Branding the CybSafe platform for the steps.

Set your validity period for your security heroes leaderboard.

You can set the time period for score calculation by heading to Platform settings. You can choose between:

Choice

Description

All time

Every point ever earned by a user will count towards their position on the leaderboard

Weekly score

Only points earned in the past 7 days will count towards a user's position on the leaderboard

Monthly score

Only points earned in the past 30 days will count towards a user's position on the leaderboard

Quarterly score

Only points earned in the past 90 days will count towards a user's position on the leaderboard

Annual score

Only points earned in the past 365 days will count towards a user's position on the leaderboard

You may wish to select 'Monthly' to crown a security champion of the month. Don't forget you'll need to review the results before the period ends!

NB: Points are always awarded and backdated, so if you weren't using heroes before, you'll still have a leaderboard when you turn it on.

Compare people within their own group

In a large organisation, being ranked against everyone can put the top of the leaderboard out of reach. You can choose a top-level group instead, and each person's leaderboard on their home dashboard will rank them against their own group within it. This only affects people when the Security Heroes leaderboard is turned on.

How people are grouped

Each person is compared with the lowest-level group they're a member of within the top-level group you choose (deactivated groups don't count). For example, if you choose Division and someone is a member of a Sales team beneath it, they're compared with everyone in that Sales team. If they're a member of Division itself and of no group beneath it, they're compared with everyone in Division. People who aren't in any group within Division keep the organisation-wide ranking. The leaderboard tells them who they're compared with: "Compared with everyone in" followed by the group's name.

Choose a group

  1. In the Admin menu, go to Settings > Platform settings.

  2. In the Security Heroes section, find Compare users within, under Security Heroes points validity period.

  3. Choose a top-level group. You can type to search the list.

  4. Click Submit.

You'll see "Success! Your platform settings have been saved." People see the change the next time they load their home dashboard.

If you can't see Compare users within, contact your CSM.

Who still sees the organisation-wide leaderboard

Someone sees "Compared with everyone in your organisation." if:

  • they're not in any group within the top-level group you chose

  • their group has fewer than three people on the leaderboard

  • the group you chose has been deleted, deactivated or moved under another group (this applies to everyone)

What stays the same

Points and scores are calculated in exactly the same way. Your Security Heroes report under Reports > Engagement > Security heroes still shows everyone in your organisation.

Go back to one leaderboard

Choose All Users in Compare users within and click Submit. Everyone is ranked against the whole organisation again.

Which group should I choose?

Choose the top-level group whose groups beneath it match how your people work, such as divisions, regions or business units. If those groups are very small, more people will fall back to the organisation-wide leaderboard.

What if someone is in more than one group?

If someone is a member of two or more groups at the same level within the top-level group you chose, they're compared within just one of them. To make sure people are ranked against the right colleagues, keep each person in one group at each level.


How are these scores calculated and how can I boost them?

The Security hero scores are calculated by interactions with the CybSafe platform and update daily. These following actions will boost a users score:

Security heroes amplify good cybersecurity practices. The clue’s in the name. Points are scored each time security advice is shared through the CybSafe platform. The more someone shares cyber-content, the greater the influence on others’ cybersecurity practices. It’s all about social learning and salience.

Security heroes not only help others adopt good cybersecurity practices, but they report progress to CISOs, IT, and other security departments. Identifying and reporting security strengths and weaknesses embeds healthy practices org-wide. Not to mention the development of more impactful platform features!

Likes (and dislikes) measure engagement. Every article engaged with = points.

The repetition of good security practices helps internalise cybersecurity policies, beliefs and values. This leads to better security behaviours through a greater sense of personal responsibility, embedding a security culture beyond compliance.

Like refresher tests, re-visiting and completing goals helps internalise security behaviours, further embedding a positive cybersecurity culture within the organisation. There are points available for every goal completed! What a bargain.

Security heroes are interested and enthusiastic about cybersecurity. How do you measure that? Well, the more engaged your cyberheroes, the more often they’ll log on to the platform. The longer they spend on the platform, the more likely they are to partake in - and amplify - good cybersecurity behaviours.

Security surveys illustrate where your security exceeds, and what can be improved. After all, there’s no more trustworthy a source than your security heroes. That’s why every security survey question is worth points. So get answering!

Like security surveys, culture surveys are good indicators of the effectiveness of your security culture. Better understanding your security culture allows you to forge better policies and foster stronger security values.

* NB: No points are earned from this action, however naturally it's expected that people spending time on the platform will earn points!


Security heroes explainer video


Did this answer your question?