People-Centric Security: From Awareness to Culture
summary
Argues that traditional quarterly courses fail to change behavior and shows a working people‑centric system that replaces 3–4 hour sessions with 3 minutes per week of personalized nano‑learning, timed to each user’s personalized engagement peak, plus continuous feedback and gamified incentives. Describes three deployed tools — SafeTrain, SafeR, SafeProtect — that deliver testing, data‑leak detection and remediation, report improved retention and create voluntary security ambassadors rather than checkbox compliance.
AI-written summary · about
chapters (6)
- 0:00Introduction
- 1:59Flaws in security training
- 4:55People-centric security
- 7:26Gamification for security culture
- 9:52Personalized security tools
- 12:22Q&A
related talks
52mLeveraging Psychological Needs For Building A Security Culture Amongst Developers
29mUsable Security: A Human-Centric Approach to Security
48mHow to build a security mindset
40mPartnering with HR to Build a Culture of Cybersecurity
46mLet’s Blow Up Security Awareness and Start Over
46m“The System...Is People!” Designing Effective Security UX
11mPeople-Powered Security: The Role of Soft Skills
37mSecurity Culture Hacking: Disrupting the Security Status Quo