The Challenge: Bringing the MRSI of Regional Banks Together Around Cybersecurity

For Crédit Agricole, with its decentralised model of autonomous regional banks, raising awareness about cybersecurity requires unique orchestration. CASIHA (Centre d'Appui aux Services Informatiques de l'Habitat Agricole), a structure that supports the banks on IT and cyber issues, faces a strategic challenge: how do you create a strong, collective moment when the Information Systems Risk and Security Managers (MRSI) are scattered across the country?

[SUGGESTED IMAGE: Screenshot of the live CyberCup with dynamic leaderboard and timer]

As the organiser of Sensiday, the annual flagship event on cyber awareness in the Crédit Agricole world, CASIHA was looking for an innovative format to virtually bring together its MRSI: a fun and engaging cyber competition, in a format compatible with busy schedules.

The Constraints of a Network of Regional Banks

Challenges of the Decentralised Model

• Autonomy of the Banks: each bank has its own organisation, priorities, and constraints

• Geographic Dispersion: MRSI are spread across the national territory

• Time Constraints: mobilising without blocking half a day in already busy schedules

• Technical Accessibility: avoiding barriers (accounts, installations, variable IT configurations)

• Remote Collaboration: creating a group dynamic without physical presence

Strategic Challenges for CASIHA

• Unite the MRSI Community: strengthen the bonds between cyber professionals from different banks

• Maximise Participation in a short time slot (in the spirit of Sensiday)

• Create a Fair Competition among banks of different sizes and maturities

• Objectively Measure Impact for reporting to the banks

• Generate a Memorable Moment that aligns with the Group's awareness strategy

🎯 BANKING NETWORK GOAL

In a federal model like Crédit Agricole’s, collective events are essential for creating a common cyber culture, sharing best practices between banks, and reinforcing the sense of belonging to a network.

The Solution: A Live Twitch-Style CyberCup

Brain Security crafted "The MRSI Battle," a 1-hour online event that combines gamified competition and live hosting in a format inspired by Twitch streams.

[SUGGESTED IMAGE: Live interface with host, real-time leaderboard, and participant chat]

Architecture of the CyberCup Online

Optimised Competition Format

• Duration: 60 minutes including warm-up, competition rounds, final, and podium ceremony

• Ultra-simple Connection: ephemeral unique link, no login required

• Real-time Quiz with visible timer and dynamic live leaderboard

• Live Hosting by a Brain collaborator in Twitch format (comments, encouragements, explanations)

Engaging Game Mechanics

• Questions tailored to MRSI level (balance between technicality and accessibility)

• Instant scoring with updated leaderboard after each question

• Progressively more challenging rounds

• Spectacular final to determine the podium

Motivating Reward: The winner earns a Brain kiosk for a year for their organisation, creating a tangible and rewarding stake beyond mere competition.

End-to-End Operational Flow

Preparation Phase (D-10)

• Save-the-date with concept presentation and stakes

• Communication Kit provided (emails, visuals, presentation texts)

• Educational Resources shared in advance (optional)

Mobilisation Phase (D-3 to D-1)

• Automatic Reminders at D-3, D-2, and D-1

• Access Link Reminders with connection instructions

• Teasing about the format and rewards

D-Day: The Live Event (60 minutes)

• T0-10min: warm-up and familiarisation with the interface

• T0-40min: competition rounds with live leaderboard

• T40-55min: final between the best

• T55-60min: podium announcement and symbolic prize giving

Capitalisation Phase (D+1)

• Replay of the event available for absentees

• Results Export (CSV) with detailed scores and participation statistics

• Synthesis for internal communication

📊 EVENT RESULTS

• 100+ MRSI connected simultaneously

• 400+ games played in 20 minutes of pure competition

• 1 hour of collective engagement without loss of attention

• Winner rewarded with an annual Brain kiosk for their organisation

The Results: Massive Participation and Successful Engagement

Exceptional Quantitative Performance

The event far exceeded initial expectations:

• 100+ simultaneous participants: exceptional connection rate for a remote format

• 400+ games played: fast-paced activity demonstrating participants' engagement

• Low abandonment rate: MRSI stayed until the end despite the length

[SUGGESTED IMAGE: Participation graph per 10-minute interval showing constant engagement]

Qualitative and Relational Impact

Beyond game metrics, the CyberCup generated organisational benefits:

For Bank MRSI

• A moment of conviviality in an often-isolated daily routine within one's bank

• Informal benchmarking of one's level against peers from other regional banks

• Updating knowledge on recent threats in the banking context

• Virtual Networking through chat and exchanges during the event

For CASIHA and the Banks

• Unification of the MRSI community of the Crédit Agricole network around a shared moment

• Visibility of cyber engagement to Bank Management

• Objective data on the level of network awareness (average scores, success rates)

• Replicable format for other groups (IT managers, data protection officers, business teams)

• Valuation of Sensiday: demonstrates innovation in awareness formats

For the Winner and Their Bank

• Recognition within the Crédit Agricole professional network

• Annual Brain kiosk: a tangible sensitisation tool for the winning bank

• Internal valuation by the bank's management and teams

Participant Testimonials

Post-event feedback highlights the unique experience:

• "Refreshing format, far from traditional webinars"

• "Live hosting creates a real dynamic, you feel connected"

• "Real-time ranking adds a fun, stress-free aspect"

• "I learned while having fun, and that's a change!"

🎯 LESSON FOR CYBERSECURITY MANAGERS

"Synchronous formats create a sense of event that asynchronous modules cannot replicate. To mobilise dispersed populations, the 'live' effect and the spectacular dimension are essential."

Why the CyberCup Online Works

Key Success Factors

1. Minimal Entry Barrier No account creation, no app download, no configuration. A simple click on a link and off you go. This simplicity eliminates 90% of the usual frictions of online events.

2. Calibrated Duration 60 minutes is enough to create a memorable event, but short enough to fit in an IT manager's or security manager's schedule. The "lunch break + 15min" format works perfectly.

3. Live Hosting = Engagement Unlike a standalone quiz, live hosting creates:

• A group dynamic even at a distance

• Contextualised educational explanations

• A show dimension that maintains attention

• Improved retention (one remembers the host's comments)

4. Healthy and Rewarding Competition Real-time ranking stimulates engagement without causing paralyzing stress. The tangible reward (annual kiosk) adds a concrete stake.

5. Zero IT Load For the organising teams, it's turnkey:

• No infrastructure to provision

• No technical support to provide

• No connection logistics

• Brain handles everything, from tech to hosting

[SUGGESTED IMAGE: Diagram showing the simplicity of the user journey vs. traditional alternatives]

Format Adaptability

The CyberCup Online adapts to different contexts:

By Target Population

• IT Managers and cyber teams (more technical format)

• Managers and N+1 (focus on governance and responsibilities)

• General public employees (maximum simplification)

• Specific professional groups (finance, HR, sales)

By Ambition

• Discovery Format (30-40 participants): first experience, concept test

• Standard Format (50-100 participants): larger event

• Large Scale Format (100-300 participants): major corporate event

By Recurrence

• One-Time Event: launching a cyber initiative, Sensiday, Cybersecurity Month

• Thematic Series: quarterly CyberCup with changing focus (phishing Q1, ransomware Q2, etc.)

• Annual Championship: local qualification then national/international final (e.g., annual MRSI Battle)

Sustaining the Impact After the Event

Capitalise on the Created Dynamic

Post-Event Communication

• Award announcement with photos/names of winners (prior consent)

• Intranet article recounting the event with testimonials

• Video replay for absentees and for archives

Educational Exploitation

• Analyse most missed questions = priority awareness axis

• Data export for IT manager reporting (participation rate by department, average scores)

• Identification of champions for cyber ambassador roles

Continuity of Engagement

• Offer participants access to the Brain platform independently

• Organise monthly mini-challenges to maintain engagement

• Create a community (Slack, Teams) to share best practices

💡 STRATEGIC ADVICE

Announcing the next CyberCup at the end of the event creates anticipation and turns a one-off event into an expected rendezvous. Regularity (e.g., quarterly CyberCup) maximises long-term impact.

Interested in Organising Your CyberCup Online?

The CyberCup format adapts to all organisation sizes and types of populations: IT managers of subsidiaries, regional bank cyber experts, dispersed business teams. Brain Security manages the entire organisation, from preparation to live hosting.

Ideal for events like Sensiday or Cybersecurity Month, the CyberCup creates a strong moment that unites your cyber communities.

Next Steps:

• Organise Your CyberCup Online → brainsecurity.io/cybercup-online

• See a Demo in 15 Minutes → brainsecurity.io/demo

• Talk with Our Team to define the optimal format according to your goals