Cybersecurity awareness: the power of consciousness

Code This Lab Srl was founded in 2009 by two young computer scientists who shared an innovative vision of the digital world. In just a few years, the project has grown into a structured organisation with specialised departments ranging from game development to system integration.

Today, the company combines knowledge and curiosity to create quality products, always ready to explore new horizons.

Among the main activities and projects carried out are:

• Development of video games and advergames

The company develops video games for PCs and mobile devices, published on various international platforms (Microsoft, Game Distribution, Yandex, etc.) and on the stores of the main operating systems (iOS and Android).

Over the years, the gaming development department has specialised in the design of advergames: customised video games for brands and companies that choose to communicate through gaming, incorporating branded games into their advertising and media strategies.

• 3D modelling

The use of the most innovative design software has enabled the creation of 3D models that faithfully reproduce human movement. Code This Lab is a top seller on the leading marketplaces for 3D modelling.

• Development of management software and system integration

Through its dedicated business unit, Vulcano Digital, Code This Lab develops software and technological solutions for the digitalisation of businesses, in line with process automation and the challenges of Industry 4.0.

The Vulcano Digital team supports SMEs in their digital transition and creates intelligent connections for large companies, integrating IT components into production and monitoring systems.

Cybersecurity awareness programme

In an increasingly competitive market, Code This Lab, a cutting-edge digital company recognised for its resourcefulness and foresight, has demonstrated a priority interest in the continuous training of its employees. Understanding the crucial importance of cybersecurity, it has decided to rely on Exprivia's expertise to develop a tailor-made Awareness programme focused on education and awareness in the field of IT security.

Developed by Exprivia to meet the specific needs of Code This Lab, the awareness programme was designed to fill any training gaps and strengthen knowledge in key areas of cybersecurity.

A central aspect of the project was to explore the risks associated with phishing, one of the most common and insidious threats in the field of IT security.

In-depth discussions were held on the fundamentals of cybersecurity and personal data protection.

Furthermore, considering the core business of Code This Lab, it was deemed strategic to include an advanced module dedicated to Application Security. Application protection, often the first point of contact with the outside world, is a critical component of a company's overall security. Exprivia, in agreement with CodeThisLab, provided not only theoretical training but also practical advice on best practices for secure development, vulnerability management and the implementation of robust security protocols.

Addressing these issues together with an expert teacher, in dedicated lessons and through interactive workshops, simulations and personalised teaching materials, represents added value. Thanks to their experience in cyber matters, the teacher has helped to create the right sense of alertness through the use of case studies (use cases) which effectively make cybersecurity training more tangible and relevant.

Finally, the skills acquired by employees were certified through the issuance of digital certifications represented by Open Badges. Incorporating cybersecurity skills certification into the training programme is a powerful way to motivate employees to actively participate and improve their skills. Certifications not only provide formal recognition of the skills acquired, but also incentivise employees because they demonstrate a corporate culture that values security.

Details of the training programme areas

The cybersecurity awareness programme began in autumn 2024.

A cybersecurity awareness campaign was conducted, creating a training programme based primarily on four areas considered to have a significant impact on cyber risk. The content, agreed with Code This Lab, was customised by Exprivia based on the experience of the target team to ensure targeted and effective learning.

The four areas were:

Cybersecurity Fundamentals: basic knowledge was provided to develop an informed approach to cybersecurity, with a particular focus on the main cyber threats, security process and control concepts, and the most relevant best practices. The identification of cyber risk cannot be separated from a thorough understanding of the context in which an organisation operates. Awareness of the threats, vulnerabilities, and specificities of one's ecosystem is a fundamental element in preventing, detecting, and mitigating possible attacks.

Many of our courses and seminars are delivered with the contribution of leading speakers from the Italian scene. For example, the module dedicated to Cybersecurity Fundamentals was taught directly by Domenico Raguseo, head of Exprivia's Cybersecurity division and a highly regarded speaker in the sector.

Protection of Personal Data: an in-depth analysis was provided on the European General Data Protection Regulation (GDPR), illustrating how this regulation applies to companies and organisations. The purpose, principles and fundamental concepts of the GDPR were discussed, focusing on the security measures to be implemented in various areas to ensure the correct and secure processing of personal data.

Application Security: the concepts of software vulnerability, security threats, the OWASP Top 10, and AGID guidelines for secure code development were presented. The objective achieved was to increase developers' awareness of the concept of security applicable to the entire software development life cycle (SDLC) and to produce applications that include aspects of Security by Design and Security by Default.

Simulated phishing exercise: Two separate exercises were conducted, targeting the entire Code This Lab workforce. The first was carried out prior to the training programme to assess the behaviour of the company team when faced with a suspicious email. The second exercise was conducted at the end of the training programme to highlight how greater awareness of security issues can help recipients avoid falling into phishing traps.

Conclusion

Improved resilience

The awareness programme identified by Exprivia and Code This Lab has increased employee awareness and, therefore, improved the overall resilience of the company. The skills acquired have not only reduced the risk of cyber incidents, but have also spread a culture of security.

Increased security for developed applications

Greater attention to code writing brings numerous cybersecurity benefits for the development team. It reduces vulnerabilities, prevents exploits and improves application robustness. More secure code ensures less exposure to external risks and facilitates compliance with security standards.

Better management and processing of personal data
Personal data protection ensures security and privacy by preventing unauthorised access and misuse. It reduces the risk of identity theft and safeguards your company's reputation. Furthermore, complying with data protection regulations increases customer confidence, improving relationships and promoting transparency.