Empowering people through threat‑led cyber awareness

Industry benchmarking reports analysing tens of millions of awareness activities measure program effectiveness almost exclusively through phishing simulation metrics.

Every day, threat actors refine social engineering techniques that exploit trust, urgency and cognitive overload. Yet across higher education, many cyber awareness programs still rely on static, generic content that struggles to keep pace with real-world threat activity—or resonate with staff navigating complex, high-pressure environments.

This session brings together cyber professionals from Deakin University, Monash University and The University of Melbourne to share practitioner-tested approaches to threat-led awareness, highlighting where strategies converge, where they differ, and what has proven most effective across diverse university environments.

Rather than treating education and awareness as a compliance obligation, this session reframes it as a living extension of threat intelligence. We explore how regularly translating real adversary behaviour into concise, relevant advice helps staff understand why they are being targeted, not just what they should do.

Each university will share its approach to threat-led awareness, including:

• How current threat intelligence and sector-based incidents inform awareness activities
• How messaging is adapted for different audiences and operating contexts
• How timely, ad hoc notifications reinforce awareness at moments that matter

The session will also examine how Smart Brevity and creative engagement techniques help cut through information fatigue, enabling security teams to deliver concise, high-impact messages that are more likely to be read, remembered and acted upon.

Together, these real-world perspectives demonstrate how collaboration across our institutions enables better outcomes - sharing lessons learned, avoiding common pitfalls, and empowering people with the insight they need to recognise and respond to modern threats.

This is a practical discussion for cyber professionals looking to move beyond checkbox education and awareness and build programs that genuinely influence behaviour, because effective cyber defence starts with informed and empowered humans.