Course delivered to more than 60 EU CyberNet Expert Pool members on communication in cybersecurity and explained why it has become an essential part of cyber resilience. As communication has grown to integral part of cybersecurity, participants discussed how cyber incidents happen, how threat actors operate from cyber criminals and hacktivists to state-linked actors and most importantly, how cyber threats can affect organisations, businesses and societies economically, technically and psychologically. Participants discussed practical examples of phishing, scams, ransomware and data breaches with a focus on what organisations could prepare and do in communications before, during and after cyber-related incidents. 

The crash course also examined the challenges of communicating cybersecurity to citizens. Discussions and presentations highlighted that while many people consider cybersecurity important, they often do not see it as personally relevant or they lack skills. Technical language, invisibility of risks, information overload or complex instructions can reduce engagement. Participants reflected on the importance of clear, simple and practical communication that helps citizens understand risks and take realistic steps to stay safer online. 

It was highlighted that excessively threat-centric messaging can create distrust, anxiety and paralysis instead of building resilience. Effective communication should inform and empower audiences rather than scare them: calm, transparent people-centric communication helps organisations maintain credibility and strengthen trust but also improve preparedness during crises.  

The crash course concluded with building a plan for cyber crisis communication. Participants analysed and solved cases for raising cyber awareness along with proactive communication to learning how to plan effective awareness raising and communications campaign with defined goals and outcomes, right audiences and messages. Participants reflected that in communicating in cybersecurity it is important to understand what matters, why it matters, who is affected and how they can make a difference.  

Crash course was led by Jussi Toivanen who is currently serving as the Head of Communications at the Finnish Transport and Communications Agency’s (TRAFICOM) National Cyber Security Centre (NCSC-FI) and pursues a PhD at the University of Jyväskylä.