Beyond awareness – Cybersecurity in practice at ABC

When it comes to cybersecurity, learning happens best when theory meets practice. Reaktor Ecosystem companies Splended, together with Fraktal and their CTO Tuomo Makkonen, recently ran a cybersecurity learning sprint for the IT team at SOK ABC. The goal was clear: to turn security awareness into action.

The training took place onsite, combining short theory bursts with hands-on exercises. Participants worked through real-life scenarios, simulated incidents, and practical discussions about their own team’s processes. The session brought security out of the abstract and into everyday work when they practised, for example, what to do if there’s a two-minute time window during an incident.

The format received excellent feedback. Participants highlighted how the exercises felt relevant and tied directly to their team’s way of working, and how discussions helped surface issues that might otherwise remain unspoken until after an incident.

“Good real-life scenarios to think about.”

 

“The format was really good and tied to our organisation.”

 

“We had time to discuss security together, without this training, that wouldn’t have happened.”

What people wanted more of was time. Many wished for longer discussions and deeper dives into the exercises, which speaks to the level of engagement in the room. Some even requested more workshop sessions which tells about an active and curious learning culture in the team.

For Splended and Fraktal, that’s the best kind of feedback. Security knowledge sticks when people have space to connect it to their daily decisions.

At Splended, they design learning sprints that make complex topics such as AI, data ethics, or cybersecurity. They treat training as work: it’s practical, collaborative, and grounded in realities of the work itself. If your organisation wants to strengthen security culture or update its learning approach, we’re happy to share what works.