Don't You Know That You're Toxic? Moving Towards Positive Security Practices w/in Your Organization
summary
Lists ten concrete toxic behaviors (myth of meritocracy, hero culture, security through obscurity, punitive phishing tests, culture of no, ableist design, blame game, loser attitude, silos, lack of diversity) with fixes: use job-ad bias checkers, run reverse mentoring, measure CSO tenure (warning if <3 years), stop humiliating simulations (example: West Midlands fake bonus), replace finger-pointing with hot wash sessions, audit auth flows for accessibility and prioritize communication over secrecy.
AI-written summary · about
chapters (13)
- 0:00Intro
- 0:34Background
- 1:52Top 10 Security Behaviors
- 3:07Meritocracy
- 8:33Security through obscurity
- 10:53Punitive education
- 14:19Culture of no
- 17:39Lack of diversity
- 20:16Ableist design
- 23:21Blame game
- 26:12Loser attitude
- 28:31Isolated
- 30:20Quick Solution
related talks
40mCulture Matters—Put People at the Heart of Security
32mToxic cultures how to recognize and fix them
44mFrom Chaos to Clarity: Disarming Toxic Behavior A Guide to better Collaboration
50mYou’re Doing It Wrong! Common Security Anti Patterns
19mUnlearning Toxic Behaviors in a Code Review Culture
34mToxic management
31mDo You Even Tech Anymore: Management & Leadership in Security?
46mIn Search of Security Shangri-la