To make a difference as a security professional today, you need board support. You need resources. You need directors to trust and back you. You need organizational leaders to promote security. So whenever you have the board’s attention – or the attention of those who...
aGet your people interested in cyber security and you become more resilient. Here’s how to go about it, starting with the potential end of the world. Uranium centrifuges facilitate either nuclear power or nuclear weapons. They’re powerful, valuable and extremely...
Why do some organizations often use two or more security awareness training solutions at once? That’s a question that grabbed our attention when it popped up on social recently. The comment highlighted the following cyber security oddity… Increasing numbers of...
There is a big, hairy elephant in the room when it comes to phishing: Many organisations believe that it’s okay, or right, or that they have no choice other than to punish people who repeatedly fail phishing simulations. Are they right? Before we answer that, let’s...
To understand why it might be impossible to reduce human cyber risk without a secure culture, it’s worth considering a series of experiments from the world of behavioural science. The experiments weren’t designed to uncover security insights. Rather,...
Unconvinced? Here’s a demonstration. Although it might not seem like it, people’s actions following 9/11 demonstrate just how likely it is you’re miscalculating your cyber risk. Following the terrorist attacks of 9/11, people began to change their travel...