Microlearning – continuous learning, reliably up to date

The problem

Regulation grows faster than anyone can read it: hundreds of pages of regulations, guidelines and internal rules that staff must know and apply – and whose knowledge must be demonstrable. The usual answer is mandatory training every year or two. For an environment that keeps changing, that is not enough. Least of all for security: attack patterns change constantly, and anyone who learns only every two years does not know most of them.

The approach

• Structuring huge documents: rulebooks are broken down into their structure – sections, obligations, definitions, cross-references.
• Defining learning chapters: the structure becomes short chapters that take a few minutes each.
• Answering questions: learners ask questions about the rulebook and get answers with a source reference to the passage in the document.
• Creating exam questions: each chapter gets exam questions that a domain expert reviews and approves.
• Testing and documenting knowledge: who learned and passed what is recorded traceably – the evidence for supervisors and auditors.

Not only regulation

The same principle carries running learning chapters for subjects that move fast: new attack patterns in IT security, new possibilities and risks of AI, new products and processes in the organisation. A chapter is created when something changes – not when the next mandatory training is due.

That way what people know is never older than how things are: a few minutes of learning a day keep everyone reliably up to date – and able to prove it.

Learning security once every two years is not enough. The new learning happens daily – in small steps, tested and documented.