ABSTRACT
Although digital technologies that protect against threats have gained importance in globally networked institutions, the “human factor” in information security (IS) has not as yet been given sufficient attention. We will present the concept behind two online IS workshops that were designed and implemented as part of the project “Mittelstand 4.0— Kompetenzzentrum Stuttgart.” The workshops served to test and subsequently evaluate two analog learning scenarios that address the issues of “social engineering” and “security risk management” for small and medium-sized companies. The learning scenarios were developed according to the principles of game-based and experiential learning and aim to raise the game players’ awareness of IS over the long term. The purpose of testing during the workshops, which had to take place online owing to COVID-19 measures, was to finalize both learning scenarios for the client. For this purpose, the implement-tation of the scenarios was modified so as to be “online compatible.” Such a “hybrid” workshop variant is proving indispensable in a digitally oriented society of the future. © 2021, Academic Conferences and Publishing International Limited. All rights reserved.