Cybermaniacs Cybermaniacs
Get A Demo
MIDSIZE LOGISTICS

CASE STUDY

How a Logistics Company Finally Reached Its Entire Workforce with Security Content- Not Just the Office

1-3
hrm-engage-icon-1
Key Stats

Multi-site Logistics Company

Midsize — 1,800 employees

CaaS — Cybersecurity Content as a Service

 

The Challenge

How do you deliver cybersecurity awareness content to a dispersed or shift-based workforce?

For the security team at a 1,800-employee logistics organization, the numbers looked fine, until they looked closely. Annual training completions were tracked. Awareness emails went out. On paper, the program existed.

In practice, it reached the people who sat at desks with corporate email addresses. Field operatives, shift-based warehouse teams, and site staff across multiple locations weren't receiving security communications and in many cases, weren't expected to. The assumption was that the high-risk population was the office.

The reality was more complicated. Dispersed workers are increasingly targeted precisely because they sit outside the reach of most programs. They handle credentials, access operational systems, and interact with suppliers and logistics partners—all vectors for social engineering and human risk exposure. The organization had a security program. It just wasn't reaching all the people who needed it.

"We wanted every single person in our organization- warehouse, field, and office - to feel like security was built for them.."

Cyber Awareness Lead, Midsize Logistics Company

 

The Approach

What does effective security communications look like when employees aren't at a desk?

The organization implemented Cybersecurity Content as a Service (CaaS), establishing a managed content delivery program that reached employees across all sites and shifts — not just those with regular access to a corporate inbox.

CaaS delivered a continuous program of security content through email and intranet channels, with content designed to be consumed quickly, on any device, without requiring platform logins or scheduled training sessions. Content was produced to a standard that worked for employees who weren't in a traditional office environment: short, direct, visually distinctive, and written for real people in real working conditions.

The security team no longer had to manage production or distribution — CaaS handled the cadence, the creative, and the channel logistics. For the first time, operational teams received the same quality of security communications as their office-based colleagues. Security became visible in places it had never existed before.

Midsize Use Case

The Results

What changes when a security awareness program creates connection through content?

Security content reach increased from approximately 10% to 90% of the workforce — a step-change in the organization's ability to manage human risk at scale. For the first time, field and operational teams were included in the security communications program, and engagement data confirmed they were reading it.

The security team gained visibility into human risk exposure across the whole organization, not just its office population. Strategically, the shift meant that security culture was no longer an office-only phenomenon — it was present across every site, every shift, and every team. The organization moved from a program that assumed coverage to one that could prove it.

“We thought we had a security awareness program, but really it was more like an email list for the head office. With CaaS, it was the first time we could honestly say the whole organization was included.”

Cyber Awareness Lead, Midsize Logistics Company

Group 126

What Changed & Why It Matters

For years, a gap existed between what the security program claimed to cover and who it actually reached. The office was included. Everyone else was assumed. That assumption is a risk — and for dispersed, operational, and shift-based workforces, it's an increasingly exploited one.

CaaS closed the gap. Not through a new platform or a training overhaul — through consistent, accessible content delivered where employees actually are. The organization went from assuming coverage to proving it. And for the first time, the security team could see the full picture of their human risk exposure — not just the part that sat at a desk.

A note on client confidentiality

Human risk work can reveal sensitive information about an organization, its people and its security program. We protect that information. The stories on this site are drawn from real Cybermaniacs client engagements, with names and identifying details removed or changed. Where several organizations have faced substantially similar challenges, we may combine those experiences into a representative story while preserving the substance of the problem, our approach and the outcomes achieved.

Schedule a Demo

We take time to understand your needs, explore the Cybermaniacs Experience, and align on business goals to strengthen your cyber culture.

Let's Chat