Västerviks municipality

Establishing a consistent level of information security and GDPR compliance across a municipality is no easy task. In Västervik Municipality, four departments and three municipal companies use NanoLearning from Junglemap to raise awareness.
“All our employees are an important part of our security efforts,” says Anna Grandalen, Information Security Coordinator for Västervik Municipality.

Anna Grandalen is responsible for ensuring that both employees and elected officials take Junglemap’s courses in information security and GDPR. The content is the same for everyone, since all of them are fundamentally users of the municipality’s information assets, most of which are housed in various IT systems. Staying on top of information security and handling personal data correctly is fundamentally about maintaining public trust and staying compliant with the law. There is awareness of this — and a clear desire to improve.

“There’s still a lot left to do,” says Anna Grandalen.
“We monitor the external landscape and collaborate within the group. The key is breaking the work into small, manageable pieces.”

Advance Communication Is Crucial

The starting point is the clear requirement that training must be systematic and continuous. In her role, Anna Grandalen values the ability to present detailed training reports to municipal leadership and department/unit managers.

“I want to give extra credit to the support we receive from Junglemap’s Customer Success Manager.
It feels very reassuring to get advice and help with setting up the training plans and delivery.”

Reaching Everyone Remains a Challenge

With employees ranging from firefighters working shifts, to school cafeteria staff, youth center personnel, and elderly care workers — the conditions for delivering training vary widely. This makes advance communication critically important. Anna Grandalen uses both the municipal intranet and Junglemap’s preparatory emails to spread awareness.

“The course’s landing page plays an important role in recognition,” she notes.
“At the same time, we see that interest is strong at the beginning, then drops off after a few lessons.”

When engagement wanes, the key is to send out another round of communications and get leaders and managers to encourage participation again. Anna Grandalen also observes a significant difference in engagement from entities that have strict regulatory requirements for conducting security training.

“If the CEO has decided the courses must be completed, then participation is higher — no doubt about it,” she concludes.