Build a Cyber Awareness Month campaign that lasts beyond October

Cyber Awareness Month is one of the biggest opportunities security awareness leaders have to energize their programs, test new tools, try new engagement strategies, and win buy-in from leadership.

But the best programs do not treat October as a one-off campaign. They use it as a launchpad.

Join Missy Bentzen, Senior Security Awareness and Training Program Manager at DocuSign, fresh off DocuSign’s 2026 CSO Award win, for a practical conversation on how she has used Cyber Awareness Month campaigns to push her program to new heights.

Missy will share how DocuSign uses gamification, employee creativity, phishing simulations, microlearning, leaderboards, and recognition to build a security culture where people actively participate, report threats, and even remind each other to “Hoxhunt it.”

Why attend?

If you are planning your next Cyber Awareness Month campaign, this session will help you think bigger than posters, newsletters, and annual training.

You’ll hear how DocuSign has used security awareness campaigns to:

• Increase engagement through gamified campaigns, stars, leaderboards, and rewards
• Embed security culture with cyber performance-based incentive programs
• Run creative employee-driven activities like Craft-a-Phish and Phish-a-Friend
• Build buy-in by reporting meaningful KPIs to leadership
• Move beyond click rates toward resilience-based measurement
• Keep training relevant with phishing, smishing, vishing, and QR-code attack scenarios
• Connect employee reporting to broader trust, fraud prevention, and customer protection
• Extend crowdsourced threat intelligence from employees to customers

A real-world follow-up to gamification theory

This webinar is the perfect follow-up to Hoxhunt’s June 30 session with Yu-kai Chou on gamification.

Where Yu-kai explains the behavioral science and game design principles behind long-term engagement, Missy shows how those ideas come to life in a real enterprise security awareness program.

You’ll learn how gamification becomes more than points and prizes. Done well, it creates visibility, motivation, friendly competition, and measurable behavior change.

What you’ll learn

In this webinar, Missy will discuss:

• How she plans Cyber Awareness Month campaigns that employees actually want to join
• How DocuSign uses gamification to make security participation visible and rewarding
• Why leaderboards, stars, streaks, and recognition can change employee behavior
• How to use campaign moments to test new ideas and build momentum
• Which KPIs matter most when communicating program value
• Why resilience rate gives a better picture than click rate alone
• How employee threat reporting can support incident response
• How DocuSign is extending reporting principles to customers to protect trust and brand integrity

Key topic: resilience rate

Many awareness programs still focus heavily on click rate.

Missy will explain why DocuSign is looking beyond that single metric toward phishing resilience: the relationship between reporting behavior and failure behavior.

For security awareness leaders, this shift matters. Resilience metrics help tell a stronger business story because they show not only whether employees avoid mistakes, but whether they actively help detect and interrupt threats.

Key topic: from employee awareness to customer trust

DocuSign’s security awareness strategy is not limited to employees.

Because DocuSign is a highly trusted brand, attackers often impersonate it. That makes customer-layer reporting and fraud response part of the broader trust strategy.

Missy will discuss how the same principles behind employee phishing reporting can extend outward: customers can report suspicious DocuSign messages, helping the organization investigate threats, take down malicious links, and protect brand trust.

Who should attend?

This webinar is designed for:

• Security awareness leaders
• Human risk management teams
• CISOs and security leaders
• Security communications teams
• Incident response and threat intelligence teams
• Anyone planning Cyber Awareness Month campaigns
• Teams looking to improve phishing, smishing, and social engineering resilience

‍