Scaling Secure Development Through Gamified Training

This guide outlines the implementation of a gamified training program aimed at enhancing secure development practices within a financial institution. The organization faced challenges including a lack of formal secure coding training for development teams and a need for executive buy-in for training initiatives. To address these issues, they adopted the CMD+CTRL training solution, which provided role-specific courses, labs, and cyber ranges. The objective was to foster a stronger security culture, reduce vulnerabilities, and improve product delivery speed. The phased rollout began with a pilot program that engaged 100 users, leading to a broader implementation for an additional 200 learners. Early indicators of success included high participation rates in training events and positive feedback from developers. The training program was designed to align with key business performance indicators, focusing on reducing vulnerabilities and enhancing remediation times. Overall, the initiative aimed to build a sustainable security-first culture within the organization.