Building A Cyber-Aware Workforce

IMPACT STORY | PARTNERS

As cyber threats continue to evolve, protecting information and systems requires more than technology. It requires a workforce equipped to recognize risks, make informed decisions and act responsibly. At Worthington Enterprises, cybersecurity is a shared responsibility, and continuous employee education is an important part of our broader approach to enterprise risk management and operational resilience.

Our cybersecurity team provides timely, risk-based awareness communications when emerging threats or business-specific risks require immediate employee attention, helping employees understand current cyber risks, recognize warning signs and take appropriate action in the moment. This approach reinforces cybersecurity as an ongoing responsibility and helps strengthen organizational resilience as threats evolve.

In fiscal 2026, our cybersecurity team enhanced its security awareness program by transitioning from a single annual training to shorter quarterly learning modules. Training topics include phishing and social engineering, ransomware awareness, mobile device security, password management and multi-factor authentication, as well as physical security practices that help protect people, facilities and information.

The quarterly cadence reflects our commitment to continuous improvement. Rather than relying on one-time compliance training, we provide regular opportunities for employees to strengthen their knowledge as the threat landscape evolves. This ongoing approach helps build a culture of accountability where cybersecurity is integrated into everyday decision-making across the organization.

“Technology is a critical part of our cybersecurity strategy, but lasting resilience depends on informed employees making secure decisions every day.” - Kurt Berberich, Global CISO

By investing in continuous learning and fostering shared accountability, Worthington Enterprises is strengthening its resilience, safeguarding critical information and supporting the long-term trust of our customers, partners, employees and shareholders.

Understanding where risks exist, taking deliberate action and measuring the progress that follows is part of a carefully calculated strategy to keep risk of disruption low.