Developing Cybersecurity - How do you make Staff Know Security
summary
Mandatory cybersecurity modules get clicked through and forgotten; KnowBe4 phishing tests often breed mistrust. Cited failures include a CrowdStrike update that crashes servers for days and a payroll impersonation scam that loses $10 million. Practical fixes: explain the why, swap canned examples for industry-specific incidents, empower power users to seed peer-to-peer advice, reveal the role of simulated phish and show real examples, and use contextual retraining or gamified positive reinforcement rather than punitive checkbox exercises.
AI-written summary · about
chapters (12)
- 0:00Introduction to security training challenges
- 4:59Why training fails and user resistance
- 9:32Mistrust in IT departments and phishing campaigns
- 12:00Providing context and relevance in training
- 19:23Empowering power users for security culture
- 21:49Building trust in Nozomi and security tools
- 24:17Summary and cultural shift strategies
- 27:13Q&A on retraining effectiveness
- 28:59Q&A on positive reinforcement
- 30:22Q&A on executive buy-in for security
- 33:13Q&A on gamification tools
- 35:26Closing remarks and event wrap-up
related talks
52mWho Says Cybersecurity Can’t Be Creative?
40mPartnering with HR to Build a Culture of Cybersecurity
38mShaping Language in Cybersecurity For People
29mMore Than Just a Pretty Penny! Why You Need Cybersecurity in...
30mSecurity Starts With You: Social Engineering
48mHow to Build an Elite Cybersecurity Team
38mClick Here Now: A Positive Way to Create Phishing Awareness
01h 03mWhy Don't Users Do What They are Supposed to Do? A look at users and security