Stop Shouting at Your Elephants Why theres more to Security Awareness than motivation Richard Beach.

21
Stop Shouting at Your Elephants Why there’s more to Security Awareness than motivation Richard Beach

Transcript of Stop Shouting at Your Elephants Why theres more to Security Awareness than motivation Richard Beach.

Page 1: Stop Shouting at Your Elephants Why theres more to Security Awareness than motivation Richard Beach.

Stop Shouting at Your Elephants

Why there’s more to Security Awareness than motivation

Richard Beach

Page 2: Stop Shouting at Your Elephants Why theres more to Security Awareness than motivation Richard Beach.
Page 3: Stop Shouting at Your Elephants Why theres more to Security Awareness than motivation Richard Beach.
Page 4: Stop Shouting at Your Elephants Why theres more to Security Awareness than motivation Richard Beach.
Page 5: Stop Shouting at Your Elephants Why theres more to Security Awareness than motivation Richard Beach.
Page 9: Stop Shouting at Your Elephants Why theres more to Security Awareness than motivation Richard Beach.
Page 11: Stop Shouting at Your Elephants Why theres more to Security Awareness than motivation Richard Beach.
Page 12: Stop Shouting at Your Elephants Why theres more to Security Awareness than motivation Richard Beach.
Page 13: Stop Shouting at Your Elephants Why theres more to Security Awareness than motivation Richard Beach.
Page 14: Stop Shouting at Your Elephants Why theres more to Security Awareness than motivation Richard Beach.
Page 15: Stop Shouting at Your Elephants Why theres more to Security Awareness than motivation Richard Beach.

Are your messages as clear and actionable as drink 1% milk?

• “Think before you click”

• “Don't get hooked by phishers”

• “Loose clicks invite hacker tricks”

• “Security is everyone’s responsibility”

• “Prepare for Disaster: Recover Faster.”

• “Classify Information”

Page 16: Stop Shouting at Your Elephants Why theres more to Security Awareness than motivation Richard Beach.
Page 17: Stop Shouting at Your Elephants Why theres more to Security Awareness than motivation Richard Beach.

• 50% of American soldiers in Vietnam experimented with narcotics

• 20% became clinically addicted

• Yet 12 months after returning home only 1% remained addicted – the same as before the war.

Page 18: Stop Shouting at Your Elephants Why theres more to Security Awareness than motivation Richard Beach.
Page 19: Stop Shouting at Your Elephants Why theres more to Security Awareness than motivation Richard Beach.

So do we ignore the elephant in the room?

Page 20: Stop Shouting at Your Elephants Why theres more to Security Awareness than motivation Richard Beach.

The message comes last…

• “Email must be classified .”

• “Email must be classified because policy says so.”

• “Cool people classify email.”

• “It is easy to classify email. Here’s how you do it.”

Page 21: Stop Shouting at Your Elephants Why theres more to Security Awareness than motivation Richard Beach.

Summary

• Users are exhausted

• Analyze the issues

• Address specific problems

• Consider the work environment

• Generate solutions

• Communicate clearly