Building a culture of security at the New York Times
summary
Four slides summarize a practical program that trains by workflow not by slogan. The newsroom deliberately opens phishing emails so training focuses on how to do that safely. Security staff spend 30-minute to one-hour meetings with teams, run a one hour with every new journalist orientation, and document enforced email settings and secure mobile communication steps. The program uses a tips distribution system, real phishing examples from the desk, and regular brown-bag sessions with external speakers.
AI-written summary · about
related talks
44mBuilding a Culture of Security at The New York Times
43mSecuring Journalists
50mWhen Your Threat Model Is "Everything": Defensive Security in Modern Newsrooms
40mPartnering with HR to Build a Culture of Cybersecurity
52mWho Says Cybersecurity Can’t Be Creative?
44mSecuring Journalists in 2022
24mConcrete Steps to Create a Security Culture
13mPeople-Centric Security: From Awareness to Culture