Security Awareness Training for People with Disabilities

Security awareness training must be accessible to everyone, including people with disabilities. Creating inclusive training materials not only meets legal obligations but also strengthens an organization’s cybersecurity by empowering all employees to participate effectively.

To understand the foundations of security awareness training and why it’s essential for every organization, read our comprehensive guide: What is Security Awareness Training?

• Increased Vulnerability to Fraud: The Office for National Statistics (ONS) reported that in the year ending March 2022, 9.1% of adults with a disability in England and Wales were victims of fraud, compared to 7.4% of non-disabled adults.
• Cyber-Victimization During the Pandemic: Research from The Open University revealed that during the COVID-19 pandemic, 45% of disabled individuals surveyed in Scotland experienced cyber-victimization, with 71% perceiving the harassment as motivated by prejudice

This blog explores the unique challenges disabled individuals face, the legal and compliance requirements for accessibility, and strategies for developing inclusive security awareness programs.

Why Accessibility in Security Awareness Matters

Accessibility in cybersecurity training is critical because inaccessible materials can exclude individuals, inadvertently increasing organizational vulnerabilities. Employees with disabilities may encounter barriers such as incompatible technology, overly complex language, or non-inclusive design, which hinder their ability to follow best practices and mitigate risks.

Legal and Compliance Requirements for Training People with Disabilities

Meeting legal and compliance requirements ensures that all employees, including those with disabilities, have equal access to security training. This fosters inclusivity and strengthens the organization’s overall security posture. Key regulations emphasize the need for accessible content and reasonable accommodations.

1. Equality Act 2010 (UK): This law prohibits discrimination based on disability and requires reasonable adjustments, including accessible training materials.
2. Americans with Disabilities Act (ADA): U.S. organizations must provide equal access to training materials for individuals with disabilities.
3. Web Content Accessibility Guidelines (WCAG) 2.2: These guidelines provide international standards for making digital content accessible.
4. Section 508 (U.S.): Federal agencies must ensure that IT and training materials are accessible to people with disabilities.
5. European Accessibility Act (EU): This directive aims to harmonize accessibility requirements for digital services across member states, including training materials, ensuring people with disabilities can fully participate in the workplace.

Challenges Faced by People with Disabilities in Security Awareness

Employees with disabilities often face unique barriers that can hinder their ability to participate fully in security training. These challenges, if unaddressed, can increase organizational vulnerabilities and exclude valuable contributors from strengthening the security culture.

• Visual Impairments: Difficulty accessing content without screen reader compatibility or alternative text for images.
• Hearing Impairments: Lack of captions or transcripts for video materials.
• Cognitive Disabilities: Overly complex language or dense formatting can make materials hard to understand.
• Mobility Impairments: Inaccessible interfaces may prevent interaction with training platforms.

How Attackers Exploit Individuals With Disabilities

Cyber attackers often exploit social engineering techniques and accessibility features to target individuals with disabilities. Understanding these methods is important for developing effective defenses.

1. Exploitation of Accessibility Features:

Cybercriminals exploit accessibility services to achieve unauthorized device access. A notable example is the GoldDigger Android Trojan, which misuses these services to remotely control devices, underscoring the inherent dangers of such features. This poses a significant risk to individuals with disabilities.

2. Increased Vulnerability Due to Social Disorders:

Individuals with certain social disorders may be more susceptible to social engineering attacks. A study focusing on people with Autism Spectrum Disorder (ASD) found that deficits in social skills and communication can increase vulnerability to phishing and other social engineering tactics.

3. Challenges with Inaccessible Security Measures:

Inaccessible security protocols can lead individuals to bypass essential security measures, inadvertently increasing risk. The UK's National Cyber Security Centre emphasizes that when security measures are not designed with accessibility in mind they can become obstacles, leading users to seek insecure workarounds.

Security Awareness Training Program for People with Disabilities

Building an inclusive security culture is important to protect employees with disabilities. Accessible security awareness training empowers them to recognize and respond to cyber threats effectively.

See the table below for a tailored training program:

Table 1: Key Categories of Security Awareness Training Program for People with Disabilities

Sample Security Training Materials for People with Disabilities

Providing a variety of accessible and engaging training materials ensures that people with disabilities can fully participate in security awareness programs. Examples include:

1. HTML5-Based Interactive Modules:

Interactive and navigable training sessions built on HTML5 to ensure compatibility with screen readers and other assistive technologies. See sample HTML5-Based Interactive Courses that you can preview and download.

Subject: Email Phishing Awareness

• Preview: Preview now
• Download Link: Download

Subject: Incident Reporting and Response

• Preview: Preview now
• Download Link: Download

2. Video Content with Accessibility Features:

Training videos are designed to be fully accessible for individuals with disabilities. They include:

• Closed Captions: Provide synchronized text for individuals with hearing impairments.
• Transcripts: Offer text-based alternatives for those who prefer reading or need assistive technology support.
• Audio Descriptions: Narrate visual elements to assist users with visual impairments.
• Adjustable Playback Controls: Allow users with cognitive or motor disabilities to engage with the content at their own pace.

Below, you can explore a sample training course featuring real-life stories, ensuring an inclusive learning experience with video, audio, and captioning features.

3. Infographics and Posters

Keepnet’s visual aids are designed with accessibility in mind to ensure inclusivity for all users, including those with disabilities. These materials incorporate:

• High-Contrast Colors: Improve readability for individuals with visual impairments.
• Simple Layouts: Enhance comprehension for users with cognitive disabilities.
• Alternative Text: Digital versions include descriptive text for screen readers, ensuring accessibility for visually impaired individuals.

Additionally, our digital infographics are compatible with assistive technologies such as Adobe Reader, which allows users to navigate content using screen readers, zoom functionalities, and customizable viewing options to better suit individual needs.

4. AI-Powered Nudges

Keepnet’s AI-powered nudges provide contextual reminders delivered via email or platforms to reinforce secure behaviors, such as "Verify the authenticity of email senders." These nudges are designed with accessibility in mind and include:

• Screen Reader Compatibility: Ensuring users with visual impairments can receive and understand security prompts effectively.
• Clear and Concise Language: Supports individuals with cognitive disabilities by simplifying information and avoiding technical jargon.
• Customizable Notification Preferences: Allows users to control the frequency and format of nudges, enhancing their overall experience and reducing cognitive overload.

A sample poster version of these nudges is available to educate users on their benefits and accessibility features, making it easier for organizations to promote inclusive security awareness practices.

The poster version of the nudge is accessible because it uses high-contrast colors and large, readable fonts, making it easier for individuals with visual impairments to understand the content. It also includes simple, concise language and clear visuals, which benefit individuals with cognitive disabilities. Additionally, the digital version of the poster provides alternative text for screen readers, ensuring inclusivity for users with visual impairments who rely on assistive technology.

Also, people with disabilities can scan the QR codes on this poster to access detailed training, including interactive content for individuals with visual, hearing, and cognitive impairments.

5. Gamified Learning Tools

Keepnet’s accessible quizzes and role-based challenges are designed to make training engaging while addressing the specific needs of individuals with disabilities. These tools include:

• Keyboard-Only Navigation: Enables users with motor disabilities to participate without requiring a mouse.
• Text-Based Alternatives: Provide options for users with hearing impairments to access quiz content.
• No Flashing Elements: Ensures a safe experience for individuals with photosensitivity or epilepsy.

These features create an inclusive learning environment, ensuring that everyone can fully participate and benefit from the training regardless of ability.

Strategies for Inclusive Security Awareness Training

Effective strategies for inclusive security awareness training involve creating accessible, comprehensive, and engaging content tailored to address the specific challenges faced by employees with disabilities. These strategies ensure everyone can contribute to strengthening the organization's cybersecurity posture.

1. Adopt Accessible Design Standards: Ensure all training materials comply with WCAG 2.2 AA standards, making content perceivable, operable, understandable, and robust for all users.
2. Use Multiple Formats: Provide text, audio, and video versions of training to cater to different learning styles.
3. Leverage Assistive Technologies: Ensure compatibility with screen readers, magnifiers, and other tools disabled employees use.
4. Simplify Language and Instructions: Use clear, concise language to make materials easier for individuals with cognitive disabilities to understand.
5. Regularly Audit and Update Materials: Periodically review training content to ensure ongoing compliance with accessibility standards and evolving user needs.
6. Engage Disabled Employees in Design: Include feedback from disabled team members while developing security awareness programs to address unique challenges effectively.

How Keepnet Supports Accessibility in Security Awareness

• Inclusive Training Modules: Security awareness training content is designed to ensure accessibility for users with disabilities.
• Real-World Phishing Simulations: Scenarios include accessible features, such as narrated prompts and visual aids, to enhance understanding.
• Customizable Formats: Training materials are available in text, audio, and video formats to accommodate diverse needs.
• AI-Driven Insights: Nudging technology adapts to individual behaviors, delivering personalized reminders in accessible formats.
• Outcome-Driven Reporting: Dashboards track participation and progress, ensuring inclusivity without compromising privacy.

Conclusion

By addressing the unique needs of people with disabilities, organizations can create a more inclusive and resilient security culture. Accessible training not only fulfills legal and compliance obligations but also empowers all employees to contribute to the organization’s cybersecurity defenses. With solutions like Keepnet’s inclusive training programs, businesses can ensure that no one is left behind in the fight against cyber threats.