Let’s Stop Talking About Security Awareness and Focus on Culture Instead

Cyber security awareness programmes have been running for decades, but are they effective? The human element is still the single most common factor in causing security incidents. Security awareness programmes haven’t changed that or reduced our susceptibility to an acceptable level. It’s time to do more than just raise awareness: we need to change the conversation and talk about behaviour and culture instead.

Based on ISF research, this webinar will provide hints and tips on how organisations can move beyond raising awareness, to embedding security behaviours. It will outline how to:

• Understand and address the psychological vulnerabilities we all have, and which attackers exploit
• Create a programme for behavioural change across all levels of the organisation
• Develop a human-centred security culture
• Positively influence security behaviour.

MEET THE SPEAKER

Richard has spent over fifteen years in the IT research industry. His work  at the ISF involves investigating, clarifying and sharing best practice with ISF Member organisations on how to adopt human-centred security strategies.