Security Awareness Blog

Why Traditional Security Awareness Refresher Training is a Bad Thing

Organizations sometimes ask me is if they should have annual 'refresher' security awareness training, and if so what should it look like? Refresher training is traditionally a sub-set of standard annual training. The idea being, after a person has gone through the standard annual training (say one hour long) the following year they go through … Continue reading Why Traditional Security Awareness Refresher Training is a Bad Thing


Blogs Dedicated to The Human Element

I'm really excited to see the security awareness community begin to develop and mature. Organizations are realizing that technology can only go so far, they have to address the human factor. As a result, we are seeing security awareness go beyond just compliance and focus on changing behavior, to have an impact and ultimately reduce … Continue reading Blogs Dedicated to The Human Element


New 2012.2 Security Awareness Training Released

Technology, cyber threats, business requirements, and standards constantly adapt and change, so to should your security awareness program. At a minimum, to ensure the effectiveness of your awareness program you should update it at least once a year. By update I mean a complete review of WHO you are targeting in your awareness program, WHAT … Continue reading New 2012.2 Security Awareness Training Released


The Security Awareness Planning Kit - Awareness Made Simple

People often under estimate the amount of planning required to establish a high-impact security awareness program. If your goal is just compliance, you can get away with pretty minimal planning. But if you want to make a difference, if you want to truly have an impact and change behavior, you need to plan. However, many … Continue reading The Security Awareness Planning Kit - Awareness Made Simple


Cloud Can Make Sharing too Easy / Confusing

I'm a big fan of the Cloud, it enables you to remotely work with large groups of people around the world, creating tremendous efficiencies not available before. For all those security people kicking and screaming about the Cloud, time to face reality the Cloud is here to stay. Our job now is to understand it's … Continue reading Cloud Can Make Sharing too Easy / Confusing