Shaping Language in Cybersecurity For People
summary
Argues that everyday cybersecurity language alienates people and undermines behaviour change, backing it with a UK government research project and a National Cyber Security Centre stat that 68% of people say they already understand cybersecurity. Calls out tools and metrics: conventional phishing simulations that only measure click rate, multi‑factor authentication UX problems (one researcher reports a grown man crying over copy‑paste), and the false promise of “10 easy steps.” Recommends active listening, people‑centric design, and multi‑year behaviour programs rather than one‑off messages.
AI-written summary · about
chapters (11)
- 0:00Intro
- 3:04Language in cybersecurity
- 5:17Good or bad security?
- 10:37What to do about it?
- 15:48Cybersecurity is complex
- 21:43How to be people-centric
- 24:33Words have power
- 25:54Example
- 31:04How do we design cybersecurity to be an experience?
- 33:20Who is cybersecurity for?
- 37:51Outro
related talks
01h 07mKeynote: Cybersecurity's Image Problem and What We Can All Do About It
44mDeveloping Cybersecurity - How do you make Staff Know Security
28mSecurity Through Design - Making Security Better By Designing for People
35mHow UX Research and Behavioral Science Can Help to Improve People's Cyber Security Behaviors
51mThinking Differently About Security
46m“The System...Is People!” Designing Effective Security UX
40mLike, Share and Subscribe: Effective Communication of Security Advice
29mMore Than Just a Pretty Penny! Why You Need Cybersecurity in...