Unlikely Allies: How HR Can Help Build A Security-First Culture
summary
HR frames concrete claims: collaborate with security to shape behavior, not just hand out training; design onboarding that publishes the CTOs phone number for doubt calls; run phishing simulations and a named interactive course; use the cookie method (colleagues claim unattended unlocked devices on Slack) and quarterly hack nights including a DDoS demo. Concrete policies include no variable pay and backward-looking bonuses. Goal is a security-first culture with psychological safety so people report mistakes and learning actually scales.
AI-written summary · about
chapters (12)
- 0:00Start
- 2:10What Is Screen
- 8:12Three Reasons Why Security and Hr Teams Can Learn from each Other
- 11:10What's the Difference between Hr and Social Engineers
- 11:56Phishing Attack
- 14:45The Australian Ambulance Association
- 15:29Australian Ambulance Association
- 21:10How Do You Educate People about Security without Fear
- 23:21Cookie Method
- 30:14Emotional Intelligence
- 32:14What Is a Company Culture
- 38:29The Impacts on Security a Great Company Culture
related talks
40mPartnering with HR to Build a Culture of Cybersecurity
24mConcrete Steps to Create a Security Culture
19mSo You’re the First Security Hire
40mCulture Matters—Put People at the Heart of Security
20mBuilding security culture on infrastructure teams
49mHiring & Retaining Security Talent: Guidance for Your Staffing Strategy
27mIncluding security in your engineering culture
48mHow to build a security mindset