Case Study: Flagstar Bank and Shields Health Care Group

This case study explores the integration of microlearning solutions into cybersecurity training for employees in two sectors: finance and healthcare, using Flagstar Bank (a regional U.S. bank) and Shields Health Care Group (a New England-based medical imaging provider) as subjects. From a social science perspective, it analyzes employee needs in dynamic threat environments, decomposes key processes vulnerable to cyber risks, and demonstrates how microlearning—via platforms like Whyhoy, 7taps, Swipeguide and Edume—can enhance awareness, retention, and behavior change. Supported by empirical research, the study highlights benefits such as improved phishing detection, reduced incident rates, and increased engagement, while addressing challenges like information overload and compliance fatigue in fast-paced workplaces.

Introduction

In an era of escalating cyber threats, including phishing, ransomware, and data breaches, effective employee training is crucial for organizational resilience. Microlearning, delivering short, targeted modules (often 2-10 minutes), aligns with adult learning theories by promoting spaced repetition and just-in-time application, reducing cognitive strain and fostering habitual secure behaviors. This social science-oriented case study applies microlearning to cybersecurity training at Flagstar Bank and Shields Health Care Group, illustrating potential enhancements in risk mitigation. By examining employee needs and process improvements, it shows how such integration can transform passive compliance into proactive defense, backed by scholarly evidence.

Needs Analysis for Employees

Employees in these settings—ranging from tellers and loan officers at Flagstar Bank to imaging technicians and administrators at Shields Health Care Group—face unique cybersecurity needs influenced by high-stakes, time-sensitive work. Social science research emphasizes that traditional lengthy training often leads to disengagement, with retention dropping 50% within hours. Microlearning addresses this by fitting into workflows.

Flagstar Bank:

• Awareness and Vigilance Needs: Staff handle sensitive financial data; they require quick refreshers on spotting phishing amid high-volume transactions.
• Compliance Needs: Regional operations involve diverse teams needing accessible content for regulations like PCI-DSS, accommodating varying schedules.
• Behavioral Needs: Pressure from customer interactions fosters risky shortcuts; training must build habits like multi-factor authentication (MFA) usage.

Shields Health Care Group:

• Awareness and Vigilance Needs: Workers manage patient imaging data; they need training on malware recognition during clinical workflows.
• Compliance Needs: Location-based roles limit time; content must align with HIPAA standards, supporting tech proficiency variations.
• Behavioral Needs: Fatigue from patient care increases errors; modules should reinforce secure device handling to prevent breaches.

Overall, employees exhibit needs for mobile, engaging training that combats forgetting and promotes cultural shifts, as studies show microlearning boosts engagement by 50% over traditional methods.

Decomposition of Typical Processes and Improvements via Microlearning

Decomposing core processes into microlearning modules allows targeted content creation, using platforms like Whyhoy, Swipeguide, 7taps, and Adobe Learning Manager.

Flagstar Bank:

• Process: Email and Transaction Handling: Involves processing customer inquiries; risks include malicious attachments.
• Process: Data Access and Loan Processing: Secure handling of applications; errors lead to leaks.
• Expected Improvements: 300% faster content delivery, with 50% higher retention, per research.

Shields Health Care Group:

• Process: Patient Data Management: Handling imaging records and scans; vulnerabilities include unauthorized access.
• Process: Device and Network Usage: Using equipment in facilities; risks from shared networks.
• Expected Improvements: Up to 90% faster onboarding, with 54% fewer incidents, drawing from analogs.

Integrating Microlearning Solutions and Benefits

Integrating microlearning involves content creation tailored for cybersecurity needs of the . For Flagstar Bank, this means embedding into banking tools, potentially lowering phishing susceptibility by 26%. Shields Health Care Group could deliver via apps, improving compliance across locations.

Key benefits include:

• Enhanced Retention and Engagement: Yields 50% higher engagement, with gamification aiding deep learning.
• Cost and Time Efficiency: Halves training costs, 300% faster development.
• Risk Reduction: 23% engagement increase, complementing simulations.
• Behavioral Empowerment: Fosters culture, reducing turnover via adaptive feedback.

Conclusion

Microlearning provides a robust framework for Flagstar Bank and Shields Health Care Group to bolster cybersecurity training, targeting needs and processes for better outcomes. Aligning with social science aims of empowered learning, implementations should track metrics like phish-prone percentages for refinement.

References

Alnajim, A.M., Habib, S., Islam, M., AlRawashdeh, H.S. and Wasim, M. (2023) 'Exploring cybersecurity education and training techniques: A comprehensive review of traditional, virtual reality, and augmented reality approaches', Symmetry, 15(12), p. 2175. Available at: https://doi.org/10.3390/sym15122175 (Accessed: 27 August 2025).

Prümmer, J., van Steen, T. and van den Berg, B. (2024) 'A systematic review of current cybersecurity training methods', Computers & Security, 136, p. 103585. Available at: https://doi.org/10.1016/j.cose.2023.103585 (Accessed: 27 August 2025).

Taherdoost, H. (2024) 'Towards an innovative model for cybersecurity awareness training', Information, 15(9), p. 512. Available at: https://doi.org/10.3390/info15090512 (Accessed: 27 August 2025).

Choudhary, P. and Potdar, P. (2024) The Impact of Microlearning on Employee Training and Development in Corporate Settings. International Journal of Advanced Research in Science, Communication and Technology (IJARSCT), 4(7). Available at: https://www.researchgate.net/publication/386742946_The_Impact_of_Microlearning_on_Employee_Training_and_Development_in_Corporate_Settings

From “prepare for the unknown” to “train for what's coming”: A digital training paradigm for the industrial workforce (2023) Smart Learning Environments, 10(1). Available at: https://www.sciencedirect.com/science/article/pii/S2452414X23000109

Gao, L., Zhang, Y., Chen, Y., Zhao, Y. and Zhang, X. (2024) 'Adoption of quick response codes as a digital microlearning tool for medical devices in a hospital setting: A case study', Nurse Education Today, 133, p. 106082. Available at: https://pubmed.ncbi.nlm.nih.gov/39501213/ (Accessed: 20 August 2025).