(CSO) How security awareness leads to behavior change
I wrote this post to focus on the confusion about the role of security awareness in behavior change. The reality is that while awareness is an essential step, it is not enough to change behaviors....
View ArticleClik here to view.
Into the Breach – Audio Series – Chapter 1 (Breach: A Human Problem)
Welcome to the audio series of Into the Breach: Protect Your Business by Managing People, Information and Risk (click this link to learn more about this book and pick up a complete copy – to get...
View ArticleMemo to the security team:educate, don’t embarrass us
The moment we judge someone, we forfeit the ability to help. Seems like a lot of what is being promulgated in so-called “security awareness“ today is nothing short of berating people with a...
View ArticleWhy people are not the problem in security and where to look (hint: grab a...
Do not put your faith in what statistics say until you have carefully considered what they do not say. ~William W. Watt Over the last few years, a series of reports, studies, and endless articles...
View ArticleClik here to view.
Why the definition of security awareness matters
Your paradigm is so intrinsic to your mental process that you are hardly aware of its existence, until you try to communicate with someone with a different paradigm. ~ Donella Meadows A practice built...
View ArticleClik here to view.
What a shopping carts reveals about security awareness
Tokens, Shopping Carts and Security Awareness What can grocery-shopping carts teach us about building security awareness that works to influence behavior change? Turns out perhaps more than imagined....
View ArticleClik here to view.
How the mobile device security paper from Symantec yields insights on...
This morning, Symantec released a new paper written by Carey Nachenberg addressing Mobile Device Security [link]. Last week, John Harrison from Symantec offered me a preview and a briefing to discuss...
View ArticleClik here to view.
The Human Paradox Gap – Security Awareness Roundtable [Audio Download]
A common concern voiced in the industry is that people simply do not, and sometimes cannot, understand why they are asked to take actions for the sake of security. However, the challenge lies less with...
View ArticleCSO Column: The Mic is Always On. Always.
A reflection on the challenges of open mics and social media — and how they impact our efforts — was the topic of an early column penned for CSO Online. Read the column here:...
View ArticleClik here to view.
Three ways to measure effective communication
“The problem with communication is that it is too ‘squishy’ to be measured. It’s just easier to focus on technical efforts with project plans.” This is an actual comment from a client about the...
View ArticleHow your signature can propel your security career
This column explains how an afternoon at a car show revealed the power of literally signing your work. When not building engines and engraving your name for all to see, is your work signature ready?...
View Article3 reasons why asking risky questions reduces risk
From an otherwise innocent dinner table conversation, I penned this column examining the value of asking risky questions in the quest to reduce risk… what do you think? Read the column here:...
View ArticleIs your definition of security holding you back?
A few years ago during a workshop, an exercise turned into a lesson learned for me. This column shares the story, the lesson learned and some tips on how you can improve your definition of security to...
View Article
