Information Security award entry

Like a body’s immune system, a cyber-aware workforce is the immune system in the body of an organizations security programs. When it comes to a cyber-aware culture, many think instantly of password quality or the logging off your computer. While important, that is similar to the “floor” of compliance. What’s critical to a healthcare organization’s cyber resilience is the rigor with which the use of sensitive and protected health information (PHI) is documented. All healthcare organizations will have informal information flows to support the real way work gets done. A cyber-aware culture will document even those informal flows to help establish the preparedness necessary for resilience. Similarly, staff should be taught cyber-aware procedures, such as disconnecting their device from the network at the first sign of malware, but not turning it off to preserve its “state” for cyber forensics investigators. Again, these cultural attributes can translate directly into valuable information that accelerates detection, response, and recovery.


We at Dubai Health Authority (Government of Dubai) missioned a program creating a cyber-aware workforce of health care professionals. This program has helped 8500+ professionals, which included, doctors, nurses, caregivers, pharmacists, non-clinical staff etc. working across, 4 Hospitals, 14 primary health care centers, 4 emergency/trauma centers & 5 specialized centers to become more intuitive to cyber security incidents and security best practices. The program was undertaken by conducting a series of parallel classroom sessions by trained professionals from DHA’s (Dubai Health Authority) information security team, which was well supported by its committed management. They covered almost 1100+ sessions over a period of 9 months. This included meticulous planning of transporting people to desired location, conducting sessions as per the shift timings of healthcare providers and adherence to hospital administration procedures. The program is now expanding its reach to private healthcare providers across Dubai and as you read this 78 private healthcare professionals have already been made cyber-aware by DHA.

[pdf-embedder url=””]

Security awareness training is considered critical, given the threats facing organizations. The impact of DHA’s vast awareness program resulted in a positive impact of organizations security posture with more incidents captured and resolved this ensured strengthening of controls across the enterprise and increased knowledge sharing amongst the staff both clinical and non-clinical. The program also touched the personal lives of employees in a positive way with they becoming more aware on information security threats lurking around them in their day-to-day habituated lives. As the employees of DHA are from different cultural backgrounds like Arabic, Asian, African, European & Western the task of involving the employees was even harder for the trainers. But the engagement ensured continued success with continuously increasing attendance and demand for more sessions from the audience.

The program’s uniqueness was at reaching out to people and planning the program around their regular working hours which introduced its own sense of acceptance among the masses. Parallel sessions were conducted to ensure maximum coverage in a stipulated time. Practicality, Animation of information security concepts/best practices and gamification ensured continued interest of the staff. The staff were also rewarded part of a quiz campaign that helped achieve more mileage and Word-of-mouth marketing for the program without extra advertising.

The inspiration behind this program was The Dubai Cyber Security Strategy and Dubai Information Security Regulation, which not only adds to the government’s numerous achievements but also gives further impetus to the government’s journey of excellence in cyberspace. The Cyber Security Strategy has a set of 5 main pillars – Cyber Smart society, Innovation, Cyber Security, Cyber Resilience and National/International collaboration, together with its guiding principles helped us derive the zeal and cohesiveness to run this program.

An entry for you to assess

2017 Submission: Heading
This is the main picture that will appear at the top of your entry. At least 1200 pixels wide is recommended.
Maximum upload size: 2.1MB
Please use the internet address of a picture (it should end in .png or .jpg or similar) that will be visible to people outside your organisation until after the awards end.
No more than 10 words please.
No more than 25 words please

Save this tab if you have made any changes

Another organisation

Please provide the internet address of the organisation's logo
For inclusion in our publicity about this entry if nominated
Information will be required about the start and end date of, size of investment in and geographical scope of your initiative where appropriate

About your Entry

The information you provide here will help determine the suitability of your submission and the best shortlist for your entry if nominated

The investment on this initiative from its initial conception to now, excluding elements that would have been required for other reasons anyway, and excluding aspects that do not impact this entry. We may use this when finalising the shortlists to split a popular category into two categories by project size. Also judges take this into account when assessing Impact, and so if you can disclose this information it can only be helpful for both of these processes.
initiative's focus
Which region(s)?
Which nation?
Covering which countries?


Let us know here if you would like some aspects of your entry kept confidential
We may wish to include your entry in publicity about shortlisted entries.
If you would like the candidate's organisation's name to not be mentioned by us then please ensure that it is also not mentioned in your text, images, videos or PDFs included in your entry.

Save this tab if you have made any changes

Your Entry

Here you describe your initiative or strategy; what you did and why you did it, how it was successful and what your fellow professionals could learn from your experience. You can use a mix of text, pictures, video and PDFs etc. to convey your ideas and engage the interest of judges. We recommend that you include a concise overview for judges spending less time reviewing entries, with greater depth also provided for those that wish to know more. You will be able to fine-tune (edit) your materials up until the time that judging starts.

Any background or confidential information that you would like the organisers to take into account when considering this entry for nomination. This will not be published.
Your entry in full.
If you have a video you would like included with your entry description, upload it to YouTube and paste the link here
Maximum upload size: 2.1MB
If you have a PDF you would like included with your entry description, upload it here

About the following

These input blocks for Impact, Innovation and Inspiration are provided in case you would wish to provide additional information for the judges, to help them understand the strength of your submission in terms of each of our three judging criteria.

The difference made in target communities and benefits to the organisation - good anecdotal or metric evidence of real outcomes rather than reams of stats.
If you have a video you would like included with your impact statement, upload it to YouTube and paste the link here
What's distinctive about this entry and how being creative has helped you overcome challenges - a good idea that your fellow professionals might not have thought of.
If you have a video you would like included with your innovation statement, upload it to YouTube and paste the link here
Hints and tips from your real experience to help your fellow professionals (the judges) adopt your good ideas and apply them to suit their circumstances.
If you have a video you would like included with your inspiration statement, upload it to YouTube and paste the link here

Save this tab if you have made any changes