Conversations with leaders, managers, and employees in Week 1

To drive meaningful behavior change, the conversations you have with leaders, managers, and employees in Week 1 should be strategic, empathetic, and tailored to each group’s influence and needs. Here's a breakdown of the types of conversations to initiate:

Coaching Script for Leaders (Executives, Site Directors)

Goal: Align leadership on the urgency of cybersecurity and their role in modeling secure behavior across IT and OT environments.

Opening:   "Cyber threats in oil and gas aren’t just digital—they can disrupt operations, safety, and even physical infrastructure. Your leadership is key to making cybersecurity a business priority."

Key Questions:

• “How do you currently talk about cybersecurity in your leadership meetings?”

• “What behaviors do you want your teams to see from you?”

• “Where do you see the biggest risks—in IT, OT, or supply chain?”

• “How can we embed cybersecurity into operational excellence and safety culture?”

Close:   "Let’s identify one visible action you’ll take this week—whether it’s reinforcing secure login practices or speaking about cyber risk in your next site visit."

🧰 Coaching Script for Managers (Operations, Maintenance, HSE Leads)

Goal: Help managers reinforce secure behaviors in daily workflows and team routines.

Opening:   "Your team’s habits—like how they handle credentials or respond to alerts—can make or break our cyber resilience. Let’s talk about how you can lead that change."

Key Questions:

• “What cybersecurity behaviors are most relevant to your team’s daily work?”

• “How do you currently respond to unsafe digital practices?”

• “What tools or training would help your team adopt secure habits?”

• “How can you integrate cybersecurity into toolbox talks or shift handovers?”

Close:   "Let’s pick one behavior to focus on this week—like reporting suspicious emails or securing mobile devices in the field. I’ll follow up with a quick guide you can share."

🛠️ Coaching Script for Employees (Field Technicians, Engineers, Admin Staff)

Goal: Build awareness and ownership of secure behavior in operational and digital environments.

Opening:   "Cybersecurity isn’t just an IT issue—it’s part of keeping our sites safe and running. I’d love to hear how this change feels from your perspective."

Key Questions:

• “What do you understand about the cybersecurity changes we’re making?”

• “What feels easy or hard about adopting secure practices?”

• “Have you seen examples of good or bad cyber habits on site?”

• “What would help you feel more confident—training, reminders, or peer support?”

Close:   "Thanks for sharing. I’ll make sure your feedback is heard, and I’ll send a few tips to help you stay secure—especially in high-risk environments like SCADA or remote access."

SCADA systems allow operators to:

• Monitor and control equipment across vast distances

• Optimize production and reduce downtime

• Respond quickly to safety or environmental issues