Why this security no-brainer gets pushback, and what you can do about it Last time we looked at why dirty password habits are so persistent. This time we’re taking stock of locks—or a lack thereof. Be it PIN, pattern, or biometrics, a lock screen is a cybersecurity...
Last week, we talked about traditional security awareness and training, and why it doesn’t work. This time around, it’s all about passwords. On the whole, people have some questionable password habits which would make any security professional break out in a cold...
Last time, we looked at how (fiendishly simple) virtual private networks (VPNs) thwart cyberthreats. Today, we’re talking about the human risk management OG: security awareness and training (SA&T). But this isn’t about your regular 20-year-old syllabus. No, no...
Would you like some data theft with your coffee? Last time, we explored auto-updates and why your people aren’t getting around to enabling them. This week’s topic is one that’s just as easily overlooked. It goes like this. Your new marketing guy, Dave, is...
We were wrong. Humans are NOT “security assets”. First, the industry referred to people as the “weakest link” in cybersecurity. Because you know how those pesky things click on every link they’re sent. Then they became the “strongest asset” because the industry...
Here’s the thing. Your cybersecurity goals are very noble. You know the risks you want to avoid, and that’s great. Except it could all count for nothing. If you’re a security awareness professional, don’t quit your job just yet. We want to get you on your way to...