Security Awareness Blog: Category - Security Awareness Planning

Looking Forward to Securing The Human in 2015

2014 has been an amazing year for the security awareness community. I feel organizations are truly making the fundamental shift from just compliance to changing human behavior. From working with hundreds of organizations, teaching multiple classes of SANS MGT433 and the first ever security awareness summit, I'm seeing both interest and investment in security awareness … Continue reading Looking Forward to Securing The Human in 2015


Aligning HR With Secure Behaviors

One of the ideas I pulled from John Kotter's book Leading Change was a suggestion on Human Resources. Have your HR team align performance evaluations, compensation, or promotions based on peoples' security behaviors. This does two things. First, it increases motivation because people see an actual, tangible gain by changing their behaviors. But even more … Continue reading Aligning HR With Secure Behaviors


Book Review - Switch: How to Change Things When Change is Hard

I just finished the excellent book Switch: How to Change Things When Change is Hardby Chip and Dan Heath. Similar to John Kotter's book Leading Change this book is ultimately about changing behavior. While Kotter's book is strategic and focuses on change in large organizations, Switch is more tactical and at the individual or small … Continue reading Book Review - Switch: How to Change Things When Change is Hard


Coming to Australia - Building High-Impact Awareness Programs - A Two Day Course

Folks, I'm excited to announce that SANS MGT433 (Building a High-Impact Awareness Program) is coming to Canberra, Australia 18/19 March next year. This will be the first time this intense two-day class has ever been taught below the equator. If you are Down Under and your organization is building a new security awareness program … Continue reading Coming to Australia - Building High-Impact Awareness Programs - A Two Day Course


You are for Sale: Wellness Apps, Wearable Devices, and Data Privacy

Editor's Note: This is a guest Blog Post from Kelli Tarala.This is the second in a series of blog posts from her about wearable devices and healthcare. Introduction:In a recent post we discussed health wearables, a class of devices that measures and reports on statistical health information such as number of steps taken, heart rate, … Continue reading You are for Sale: Wellness Apps, Wearable Devices, and Data Privacy