As you roll out your security awareness program, or deploy training to change specific behaviors, be prepared for not everyone changing their behaviors. Instead of becoming frustrated by failures or blaming employees, use this opportunity to learn and improve. Ask the individuals why they did not change their behavior. By using a Behavior Model such … Continue reading When Employees Don't Change Behavior - Ask Why
Traditionally in the field of security awareness, trainers have looked to the field of instructional design on how to develop their security awareness training. Models such as ADDIE provide a framework that build on how people think and learn. While such models are important, these may not be the only ones that apply to security … Continue reading Instructional Design vs. Behavior Design (Which is Better for Awareness)?
Recently I attended the Human Behavior Design course by Dr. BJ Fogg. One of my key take aways from the course is his Behavior Model and how it applies to security awareness training. By understanding this simple model (I highly recommend you take five minutes to check it out), you begin to understand why so … Continue reading Behavior Model - Helps Explain Why We Can Be So Bad at Awareness
Folks, we wanted to share a friendly follow-up on the Security Awareness Summit this week. We had over 130 security awareness officers from around the world and numerous industries come to share their lessons learned. We designed the summit for maximum interaction, to include a 'show-n-tell' table where people could share their awareness materials, attendee … Continue reading Security Awareness Summit Roundup
Folks, friendly reminder that SANS first Security Awareness Summit will be next Wednesday, 10 September in Dallas TX. Not only am I excited about the six great speakers, but Alan Paller (SANS Director of Research) will be leading the panel at the end of the day. In addition we have lightning talks during lunch and … Continue reading Follow the Security Awareness Summit at #SecAwareSummit