"If you look at statistics on how attacks were established. You will find that over 50% of attacks came from employees within a company that inadvertently allowed access to a hacker, or simply disregarded company security policy. At my last company, I was directly involved in writing the security policies and procedures, as well as setting guidelines and conducting training sessions with employees to teach them to detect phishing emails and similar scams. I demonstrated in detail what a phishing email looks like, what to look for when they receive one, and the procedure to follow once this type of scam is identified. I created an email account so that anyone who received these phishing emails, l could send them straight to that account."

"During my security training sessions with employees, I explained the importance of cyber security and pointed out the risks of an attack and the negative impact it could have on our organization if personal employee or company information is compromised. As part of the training sessions, I discussed in detail the use of and management of strong passwords, and how to use unique characters when selecting new passwords. As a way of making sure all employees were adhering to our security policies, I set quarterly reminders for everyone to change their passwords. I also had everyone apply updates to their systems and privacy settings."

Since communication is a key sauce skill hiring managers look for in prospective employees, you can use this question to demonstrate your skills in this area. A good way to respond would be by relating an experience you had with a previous employer in which you communicated the organization's cyber security policies and procedures and how important was to adhere to these. The experience you share with the manager will be a reflection of your capabilities and may IP show that you can think outside the box. This helps the manager see the level of detail you go through to protect your company's information security assets and employees.