Transforming Cybersecurity Awareness Through Gamification at Bank AL Habib

Bank AL Habib partnered with Trillium to reimagine cybersecurity awareness through a large-scale gamified campaign. The initiative engaged more than 6,000 employees across 8+ cities, using interactive activities to turn complex cyber risks into memorable, practical learning experiences.

Cybersecurity is no longer only a technology challenge. It is also a human one.

In today’s threat landscape, many incidents begin with everyday human behavior: a suspicious link clicked too quickly, a phishing attempt missed, a fake message trusted, or a physical security risk overlooked. For large financial institutions, this makes employee awareness a critical part of the overall cybersecurity strategy.

Bank AL Habib recognized that traditional awareness programs were no longer enough. Static presentations and lecture-based training often struggle to create lasting engagement, especially across large teams, multiple branches, and diverse employee roles.

The bank needed a solution that could reach employees at scale, keep them engaged, and translate cybersecurity knowledge into real behavioral change.

To meet this challenge, Trillium Information Security Systems designed and executed a Gamified Cybersecurity Awareness Campaign for Bank AL Habib. The initiative moved away from passive learning and introduced an experience-driven model built around interaction, participation, and practical understanding.

Instead of relying only on classrooms and presentations, the campaign used game-based learning activities such as Spin the Wheel, Dart Boards, cybersecurity-themed laptop games, Jenga, and Snakes & Ladders. Each activity was designed to make cybersecurity concepts easier to understand, remember, and apply in real-world situations.

The campaign covered more than 10 cyber threat scenarios, including phishing and social engineering, vishing, smishing, quishing, ransomware, deepfake attacks, juice jacking, cryptojacking, shoulder surfing, tailgating, and the responsible use of Generative AI.

The scale of the initiative was significant. More than 6,000 employees were engaged across more than 8 cities through a multi-branch inclusion model. Both technical and non-technical employees participated, helping create a shared understanding that cybersecurity is not limited to IT teams. It is everyone’s responsibility.

The impact went beyond awareness. Employees developed a stronger understanding of modern attack vectors, including AI-driven threats and deepfakes, as well as human-centric risks such as social engineering and tailgating. The campaign also supported improved adoption of secure practices across both digital and physical environments.

The initiative received strong participation and positive feedback from employees and management. More importantly, it helped reinforce the organization’s first line of defense: its people.

For Bank AL Habib, the campaign created long-term strategic value by reducing the likelihood of human-error-driven incidents, strengthening organization-wide security culture, and establishing a scalable awareness model that can be repeated across locations.

For Trillium, the project demonstrated how cybersecurity awareness can become more than a compliance activity. With the right approach, it can become an engaging, practical, and measurable driver of behavioral change.