stop shouting at your elephants why theres more to security awareness than motivation richard beach
TRANSCRIPT
Stop Shouting at Your Elephants
Why there’s more to Security Awareness than motivation
Richard Beach
Are your messages as clear and actionable as drink 1% milk?
• “Think before you click”
• “Don't get hooked by phishers”
• “Loose clicks invite hacker tricks”
• “Security is everyone’s responsibility”
• “Prepare for Disaster: Recover Faster.”
• “Classify Information”
• 50% of American soldiers in Vietnam experimented with narcotics
• 20% became clinically addicted
• Yet 12 months after returning home only 1% remained addicted – the same as before the war.
So do we ignore the elephant in the room?
The message comes last…
• “Email must be classified .”
• “Email must be classified because policy says so.”
• “Cool people classify email.”
• “It is easy to classify email. Here’s how you do it.”
Summary
• Users are exhausted
• Analyze the issues
• Address specific problems
• Consider the work environment
• Generate solutions
• Communicate clearly