Specsavers Case Study
Specsavers has been a familiar name on the high street for more than 30 years. Providing glasses to one in three people in the UK. TSC was tasked with delivering a consistent level of information and cyber security awareness training for employees.
Introduction
Specsavers’ reputation is based on being a provider people can trust. It is therefore vital that security risks are mitigated, to make sure that the business can continue to fulfil this promise.
The company trades on still being a family-run business. Increasing the security awareness of Specsavers’ partners and retail staff is viewed as a key loss prevention strategy that ultimately supports the organisation’s profitability.
The strategy also supports the duty of care that Specsavers has to its employees and customers by developing knowledge of security behaviours that help both at home, on premises and whilst travelling on business.
The challenge
Within Specsavers, there was a requirement to deliver a consistent level of information and cyber security awareness training that would ensure employees and the business were compliant with key legislation.
Specsavers Optical Group Ltd is a global retail chain, which offers optician services, along with eyeglasses, contact lenses and hearing aids. Employees in the retail stores, based on previous years, were considered a hard-to-reach audience.
With 20,700 employees across its 803 retail stores in the UK and Ireland, and a further 1,332 staff in its UK and Northern European support offices being earmarked for training, Specsavers needed a solution that brought greater engagement across the workforce.
The objectives
To provide Specsavers with an information and cyber security awareness eLearning course that:
- Delivered learning on identified information security topics in an engaging, entertaining and interactive format, in line with the company values
- Educated employees about the information and cyber risks and threats facing Specsavers
- Assessed employees’ knowledge and understanding before providing them with constructive feedback
- Was SCORM compliant for ease of implementation and recording of management information for audit purposes
The course was designed to engage staff in:
- Using your computer securely
- Handling information securely
- Working securely in the office, store and remotely
- Working with external third parties
- Reporting a security incident
Our methodology:
Dedicated and open communication
Scoping and collaboration
Understanding culture to inform content
-
Bespoke eLearning
A comprehensive training solution to educate employees about the information and cyber risks and threats facing Specsavers. This was developed based on key information and learning from the information security team. Interactive modules, which formed part of a course and clear guidance to deliver best practice advice to employees, was delivered before assessing their knowledge and understanding, then providing feedback. Course content were designed for different groups within Specsavers; segmented training for office-based and retail employees.
-
An animated infographic
An animation which focused on key themes and risk areas within the business. This useful and memorable learning aid is used within Specsavers’ induction programme to inform new starters to ‘Secure the information, Protect the brand’.
The result
"The results speak for themselves. TSC provided us with a clear direction, bringing insight into how we could improve the security-awareness culture of Specsavers and provide some great learning outcomes.
Working in close collaboration with our security team, TSC has helped provide us with this wonderful foundation to build upon. I’m immensely proud of what we’ve accomplished. Our objective now is to sustain the education and build upon these figures."
- Chris Mortlock (Director of Global Information Security)