Security Champion Blog

Points aren’t about gamification. They’re about giving visibility to the invisible, and tracking the impact of security champions in a way that celebrates their contributions - without adding overhead. A good points system should reflect your culture and drive the behaviors you actually want to see.

Through a combination of conversations and firsthand experience, we have developed a sixth sense about the mistakes that are most commonly made over the lifetime of a champion program which lead to failures.

Security Champions play a crucial role in fostering a culture of security within organizations. While "stuff"—like swag and gift cards—is a common way to reward them, there's an opportunity to think bigger and leverage other powerful motivators.

The key to building security culture is motivating and inspiring your colleagues to take proactive action - focusing on the carrot, not the stick. This can be a lot of work, so we created Katilyst to lift the burden.