Traditionally in the field of security awareness, trainers have looked to the field of instructional design on how to develop their security awareness training. Models such as ADDIE provide a framework that build on how people think and learn. While such models are important, these may not be the only ones that apply to security … Continue reading Instructional Design vs. Behavior Design (Which is Better for Awareness)?
Recently I attended the Human Behavior Design course by Dr. BJ Fogg. One of my key take aways from the course is his Behavior Model and how it applies to security awareness training. By understanding this simple model (I highly recommend you take five minutes to check it out), you begin to understand why so … Continue reading Behavior Model - Helps Explain Why We Can Be So Bad at Awareness
Folks, we wanted to share a friendly follow-up on the Security Awareness Summit this week. We had over 130 security awareness officers from around the world and numerous industries come to share their lessons learned. We designed the summit for maximum interaction, to include a 'show-n-tell' table where people could share their awareness materials, attendee … Continue reading Security Awareness Summit Roundup
Folks, friendly reminder that SANS first Security Awareness Summit will be next Wednesday, 10 September in Dallas TX. Not only am I excited about the six great speakers, but Alan Paller (SANS Director of Research) will be leading the panel at the end of the day. In addition we have lightning talks during lunch and … Continue reading Follow the Security Awareness Summit at #SecAwareSummit
The OUCH! security awareness newsletter for September is out. Led by Guest Editors James and Kelli Tarala, we explain what the Cloud is, how it works and how to use it securely. With the proliferation and use of Cloud technologies such as Google Docs, Dropbox or iCloud people are exposing themselves to greater and greater … Continue reading OUCH! is Out - Using The Cloud Securely