In accordance with the university president's directive Dnr SU FV-1593-22 all employees shall undergo training in information security and the General Data Protection Regulation - GDPR.

Since the middle of 2022 a security awareness training programme from Nimblr has been acquired by the University in order to fulfil our educational requirement. Both existing and new SU employees will be automatically enrolled in the programme. An introductory message will be sent via email and following that you will receive invitations to a number of mini-courses on varying subject matter, covering cyber security and GDPR. The sender of the emails will be <training@nimblr.net>

An innovative part of this programme is that it will distribute false phishing emails in order to train participants in recognising such things.  If you were to click on a link in such a trick email you would be taken to an informational page which will explain that the message is fraudulent and you will be given hints on how you can avoid triggering something similar, or worse, in the future. 

The programme is designed as an on-going education. It is not a single course to complete and be done with, but throughout all your time as employee new and updated information on new and current threats can be added to the course material - as and when it needs to be brought to our attention.

Even if you have already completed the University's earlier published IT security and GDPR courses you will receive these invitational emails and are expected to follow this programme that encompasses all employees.