SF Studios
When SF Studios began using NanoLearning from Junglemap, it was part of a broader initiative to strengthen security by spreading knowledge and increasing awareness — and it has truly had an effect.“We can tell that we’ve raised awareness within the organization,” says Emil Ohlsson, ISO at SF Studios.

Emil Ohlsson describes NanoLearning as an effective alternative to “sending out emails when something happens” — a method many rely on, but which has little impact.
“That kind of knowledge doesn’t stick,” he explains. “But NanoLearning, with its short and easy-to-digest lessons, really makes a difference.”
Many employees say NanoLearning makes learning about information security and GDPR feel less overwhelming. It’s “a kind way to nag,” as Emil puts it — a form of persistence that has effectively raised awareness across the organization, making people more alert and attentive.
“You don’t get that effect from manual presentations. The message might stick for a week, but then quickly fades. I believe ongoing training is the only way to create lasting change.”
Follow-up is key
It’s well known that once someone starts a NanoLearning lesson, they’re very likely to finish it. The real challenge is getting more people to start. At SF Studios, managers have been actively encouraged to drive higher completion rates — an effort that’s steadily improving overall coverage.
The results of fake phishing simulations are shared in company-wide meetings — which boosts interest and brings security issues to the forefront.
“It’s not about pointing fingers at those who click,” says Emil. “On the contrary — we give gold stars to those who ask questions and report suspicious activity.”
SF believes it's important that every employee participates in training to build a shared base of knowledge and awareness.
“Consistency is crucial. And it’s great that Junglemap updates their standard courses in the platform — so recipients aren’t getting the exact same content again and again,” says Emil Ohlsson.
So far, SF Studios uses NanoLearning specifically for awareness around information security and GDPR. But they are also considering applying the method in other areas — especially where clear communication and understanding of organizational change are needed.
Three takeaways
Measure the effects
Short lessons spread over time increase awareness.
Communicate
Sharing results from phishing tests sparks engagement — which in turn boosts interest.
Encourage Questions
Give a gold star to employees who report suspicious activity.