A Human Resource view on Information Security Awareness and Education

Re-thinking The Human Factor with Bruce Hallas

Player FM - Internet Radio Done Right

33 subscribers

Додано eight років тому

المحتوى المقدم من Bruce Hallas and Marmalade Box. يتم تحميل جميع محتويات البودكاست بما في ذلك الحلقات والرسومات وأوصاف البودكاست وتقديمها مباشرة بواسطة Bruce Hallas and Marmalade Box أو شريك منصة البودكاست الخاص بهم. إذا كنت تعتقد أن شخصًا ما يستخدم عملك المحمي بحقوق الطبع والنشر دون إذنك، فيمكنك اتباع العملية الموضحة هنا https://ar.player.fm/legal.

<div class="span index">1</div> <span><a class="" data-remote="true" data-type="html" href="/series/lipstick-on-the-rim">Lipstick on the Rim</a></span>

1
Lipstick on the Rim

إلغاء الاشتراك

منذ 5 أياممنذ 5d ago

إلغاء الاشتراك

أسبوعيا

Consider Molly Sims and her best friend Emese Gormley your new girlfriends on speed dial for all your pressing beauty and wellness needs. Is Botox a good idea? Should you try that new diet you saw on the Today Show? Molly and Emese have your back. With guests ranging from top health and beauty experts to their industry friends, you’ll get the scoop on the latest trends, which products and procedures to try, and which to run from-- and they just might be doing it all with a drink in hand. Prepare to be obsessed.

منذ عام واحد 46:59

MP3•منزل الحلقة

The role of the human resources function, in the the overall process of employee awareness, behavioru and culture can't be under stated.

In the early days of my research, at Re-thinking the Human Factor, it was very apparent that HR was a major stakeholder. From what I like to call KPI's clash, where stakeholders KPI's sometimes clash against each other, through to employee performance and development, and from HR processes such as starters, movers and leavers, through to organisational change. The HR department can add a lot of value to the process of delivering change in employee security awareness, behaviour and culture if you work on fostering a beneficial releationship.

With that in mind I wanted to invite a guest who excels in the area of organisational development, epople management and HR. Our guest, Anne Benedict, stepped right up and agreed to share some insights into the challange of employee awareness and education, from a HR perspective.

59 حلقات

A Human Resource view on Information Security Awareness and Education

Re-thinking The Human Factor with Bruce Hallas

33 subscribers

published منذ عام واحد

MP3•منزل الحلقة

The role of the human resources function, in the the overall process of employee awareness, behavioru and culture can't be under stated.

59 حلقات

كل الحلقات

1
Lessons from the world of coffee! 1:17:47

منذ 26 weeks1:17:47

1:17:47

1
Key performance metrics 1:11:18

منذ 26 weeks1:11:18

1:11:18

In this episode we re-visit an earlier theme explored in this series. The theme of mesurement and metrics. The question of how to measure awareness, behaviour or culture is something we consistently come across here at Re-thinking the Human Factor when exploring opportunities to work with clients. There's an palpable feeling, across industry chatter, that there's a real lack of maturity when it comes to how we demonstrate the effectiveness of our effrots to influence employee awareness, behaviour and culture. However, there is hope. In this episode I talk with Bernie Smith. Bernie has a focus on KPI's, not just your standard range but also he brings ideas about how you might create new metrics as well. We discuss his view on the development of metrics and how metrics can help not just measure performance but ultimately influence behaviour and shape culture.…

1
The security function's culture. 45:31

منذ 45 weeks45:31

45:31

In this episode we take a peek at the role of the security teams’ own culture and its impact on the broader organisational culture. This, is an important perspective, because whilst many commentators focus on influencing organisational culture they haven’t considered the role that the value and behaviours of the security team has in influencing positive security outcomes across the business. To help us explore this perspective, on cultural forces at play, we have a guest who knows a thing or two about how cultures are formed and influenced. Lianne Potter studied in social anthropology, then geeked out on technology before combining the two to shape an industry career which has achieved numerous accolades for her thought leadership in not just the human factor but also information security generally. Lianne, for me, illustrates a small, but growing force within the industry that recognises that the human factor needs to be repositioned not as an after thought once all the work of designing security controls has been done, but as a critical and key part of the process of understanding and managing information security risk. ©Copyright Marmalade Box Limited The content of this podcast is the property of Marmalade Box Limited. Any use of the content of the podcast, either in full or partially, will be considered an infringement of Marmalade Box Limited rights as sole owners of this content. Any enquiries about the use of this content should be directed to Marmalade Box Limited. Contact information can be found at www.marmaladebox.com .…

1
An appointment with the Doctor to discuss culture, behaviour and decision making. 44:57

منذ 50 weeks44:57

44:57

If you’re a regular listener then you will have already met today’s guest Dr. Char Sample. Char is a force at work deep within the information security community. Char is a rarity, combining a deep knowledge of both the technical and human aspects of the challenges security professionals face when managing cyber security risks. Char and I go back a long way, to a horrible conference lunch in London, where her riveting conversation meant I didn’t have to eat what was on the plate in front of me. I have been forever grateful. That riveting conversation was all about our shared understanding of how culture influences everyone’s day to day behaviours and how everyday behaviours make up culture. That shared interest has led to many conversations and shared ideas about how the information security industry could step up a level by seeing the potential for improving how we assess and manage human factor risks. In this episode we capture one of those conversations. We talk about heuristics and biases, what they are and what role they might have in artificial intelligence. Why what makes us human often makes us behave in seemingly irrational ways even when presented with all the data we need and assumptions we frequently make when developing and designing systems and processes and how this is undermining the management of business risks. Be warned, there's a lot of laughter in this episode.…

1
Insights from advertising for security awareness professionals. 57:08

منذ 1 year57:08

57:08

In this episode we are joined by a guest who has committed their career to the world of advertising agency work. Influencing target audiences awareness of products and stacking the odds in their clients favour, that the target audience will choose their product over their competitors. The challanges our guest has faced, over the years, are in many ways similar to those that education and awareness managers, for information security and data protection, now face.…

1
A Human Resource view on Information Security Awareness and Education 46:59

منذ 1 year46:59

46:59

The role of the human resources function, in the the overall process of employee awareness, behavioru and culture can't be under stated. In the early days of my research, at Re-thinking the Human Factor, it was very apparent that HR was a major stakeholder. From what I like to call KPI's clash, where stakeholders KPI's sometimes clash against each other, through to employee performance and development, and from HR processes such as starters, movers and leavers, through to organisational change. The HR department can add a lot of value to the process of delivering change in employee security awareness, behaviour and culture if you work on fostering a beneficial releationship. With that in mind I wanted to invite a guest who excels in the area of organisational development, epople management and HR. Our guest, Anne Benedict, stepped right up and agreed to share some insights into the challange of employee awareness and education, from a HR perspective.…

1
Embracing Diverse Skills When Building an Effective Education and Awareness Team. 52:00

منذ 1 year52:00

52:00

When I first got involved in “information security” 20+ years ago, I found myself almost entirely surrounded by industry peers whose training and experience was in technology or technology disciplines. My training in law, marketing and finance, and my experience in business development, marketing, recruitment and even a stint in purchasing and supplies all seemed out of line with the world of IT security as it was called back then. As I came to understand, during my own research in human behaviour and culture, my lack of an education in technology meant I was culturally and even physically wired differently. This meant I looked at things through a different set of lenses. The result, was an approach that we would now call governance, risk and compliance. However, it was these very human disciplines, which led me to fundamentally think differently when it came to kicking off the Re-thinking the Human Factor research programme. Our guest Lana McGill, to me, enshrines the change in direction of an increasing number of forward thinking security professionals looking for a more mature approach to employee awareness, behaviour and culture. Lana believes that by diversifying their search for skills and experience, outside of the traditional industry expectations, you can bring new insights and energy to the challenge of influencing employee behaviour and culture. Her role as a senior information security leader, in the finance sector, and her willingness to embrace other skills and experiences in the search for more effective interventions, gives hope that the industry inertia, when it comes to the human factor, may finally be shifting. ©Copyright Marmalade Box Limited The content of this podcast is the property of Marmalade Box Limited. Any use of the content of the podcast, either in full or partially, will be considered an infringement of Marmalade Box Limited rights as sole owners of this content. Any enquiries about the use of this content should be directed to Marmalade Box Limited. Contact information can be found at www.marmaladebox.com .…

1
The Science Behind Metrics 50:06

منذ 1 year50:06

50:06

Finding relevent metrics, for security awareness, behaviour and culture has been a long standing challenge which the information security industry has struggled hard to address. Now, when I reflect on how I personally tackled metrics, around the human factor, before I kicked off my research programme here at Re-thinking the Human Factor, I recognise I had an in-mature approach. That approach focused on what data I knew I could get rather than what was useful. Some industry folks called this "vanity metrics." That's all changed now, and that change started off, with getting back to basics by looking at what the science of measurement had to say. In this episode our guest and I talk about the sceince of measurement, how it is has evolved to enable human kind to progress at every stage of human evolution and how this knowledge might shine a light on the challenge of finding effective metrics when it comes to employee awareness, behaviour and culture. If you want to know more about how we have used this and other insights into metrics to support information security professionals measure the effectiveness of their programmes to influence security awareness, behaviour and culture then visit www.re-thinkingthehumanfactor.com and register for the monthly webinar.…

1
Insights from Educational Psychology for Information Security Professionals 1:18:35

منذ 1 year1:18:35

1:18:35

Educating employees on their roles and responsilities when it comes to information security and data protection, is common sense, and, even if you don't think that's the case, it is, without a doubt, a regulatory obligation for many. So, what is "education" and what is going on in the world of learning and development which might help us to re-think the human factor? In this episode our guest, Teisa Marshik, a respected educational psychologist and passionate educator, shares how her's and her colleagues approach to educating learners is changing. We cover everything from how the effectiveness and success of education is measured, through to how advances in our understanding of human behaviour and culture, mean we now recognise that students are consuming and responding to education content based on their own life experiences and situations and what this means for traditional best practices in L&D.…

1
Understand the forces at play. 54:25

منذ 3 years54:25

54:25

Our guest, is Dr. Ben Evans. Ben is an aeronautical engineer, and he’s applying his understanding of the forces at play, to the seemingly insurmountable challenge of conquering the breaking a world record at the Bloodhound Land Speed Project. Ben talks about the laws of science and engineering which help him to find the marginal opportunities for improvement which are helping the team towards breaking the world record. But, in this interview, it’s also clear to me, that success is a matter of teamwork often with colleagues with different and sometimes conflicting priorities. Understanding the forces at play includes understanding science and nature, even when it comes to human awareness, behaviour and culture, but it’s also about understanding the forces at play across stakeholders, where often conflicting priorities and interests can arise. Getting the “Team” aspect right, you could argue is as important as the science which drives decision its self.…

1
The human factor. A view from Brazil. 48:40

منذ 3 years48:40

48:40

In this episode we look through the eyes and experiences of an education and awareness manager from Brazil. We explore the consistent challenges, no matter where you are or what your culture is, when it comes to employee awareness, behaviour and culture.

1
Versace, Burberry and Lacoste. Thoughts from branding. 47:52

منذ 3 years47:52

47:52

In this episode we delve into the world of branding with the out standing Geraldine Michel and explore possibilities for security professionals responsible for the human factor. We draw on lessons from the world of fashion, by skirting through branding and how Brand Directors and Managers utilise this mammoth of the modern day commercial world to shape and influence behaviour and culture.…

1
An internal communications perspective. 1:04:52

منذ 3 years1:04:52

1:04:52

Internal communications is a major stakeholder in employee awareness, behaviour and culture. We often defer to their skills and experience as the specialists in communication strategy for reaching out to internal staff. However, there's something a foot in the industry. Traditional ideas of what makes "good internal communications" are being challenged and our good friend "behavioural science" has been a great influence on the thought leaders in the field of communications. In this episode I talk with one such thought leader.…

1
The human factor in the middle of a major security breach. 51:03

منذ 3 years51:03

51:03

In previous episodes of the podcast we have explored why human judgement and decision making, which drives our behaviour, is heavily influenced by the environment within which we make our decisions. In this episode we take this one step further and ask how employee awareness, behaviour and culture pans out, after all of the theorising and planning, when the tranquil environment of corporate learning is replaced by the rawness of a major security crisis.…

1
CyberSecurity ABC's 1:01:23

منذ 4 years1:01:23

1:01:23

In this episode I am joined by my co-authors, Adrian, Ciaran and Jess, of the CyberSecurity ABC’s book for a long overdue catch up. We hadn’t been able to spend anytime chatting for a while and so it was fabulous to get us all together again to enjoy having a talk about security awareness, behaviour and culture. We touch on not just the challenge of employee awareness, behaviour and culture but also about industry stakeholder’s roles in recognising the long overdue need for change. We explore the role of the environment in people’s decision making through the way Covid 19 has shaped not just the world but highlighted the need for continually re-assessing employee education and awareness. We tread the well-trodden path and saying that education and awareness doesn’t always deliver changes in behaviour and culture, and we ponder whether there needs to be a change in the language that industry uses to really break through the glass ceiling that’s been imposed on everyone responsible for employee education and awareness. It’s a great episode, touching on so much, with some laughter rolled in and a dodgy rendition of the Thompson Twin’s Doctor, Doctor track as well.…

Re-thinking The Human Factor with Bruce Hallas

1
An ex-regulators view on awareness, behaviour and culture. 1:02:40

منذ 4 years1:02:40

1:02:40

Episode Outline: We love a different angle here at Re-thinking the human factor and we think this interview is a great new angle with which to tickle your re-thinkology senses. Pay attention closely and it’s littered with insights which can make a difference to your efforts. In this episode I have the privilege to chat with the ex Information Commissioner to the United Kingdom, Richard Thomas. Richard was appointed by Her Majesty the Queen to spearhead the data protection office in its delivery of embedding privacy cultural values into day to day life in the United Kingdom. Richard explains the challenges that he and his team faced around awareness, behaviour and culture and also his thoughts around what good awareness, behaviour and culture might look like from a regulators perspective when assessing an organisation who has been reported to the regulator for a breach in security around personal data.…

Re-thinking The Human Factor with Bruce Hallas

1
What does it mean to have a people-centric approach to cybersecurity? And, why you should have one?) 50:40

منذ 4 years50:40

50:40

The vast majority of cyber attacks target people, not technology. That's why an approach to cybersecurity that centres around people can be a game changer. Research shows that ensuring employees know what to do when faced with a real threat can reduce successful phishing attacks and malware infections by up to 90%. But how do you go about it? Do you just go for it? In this episode, we’ll dive deeper into what it means to have a people-centric approach to cybersecurity, and how putting the human at the heart of your strategy can be a change gamer.…

Re-thinking The Human Factor with Bruce Hallas

1
Content is king or so they say! Discover some caveats around the saying as we explore the role of a security influencer. 1:05:27

منذ 4 years1:05:27

1:05:27

In this episode we talk with a guest who is on the front line when it comes to employee education and awareness. We talk about video content, tailoring your content to your audience and what it takes to succeed when it comes to creating videos for education and awareness purposes. We will also explore why we should not neglect, or make assumptions about, the cyber security teams brand and how our customers perceive us. And, if we get this right, how it contributes to our roles as influencers of employee awareness, behaviour and culture.…

Re-thinking The Human Factor with Bruce Hallas

1
What role training materials must play in building security aware-rich organisations? 53:26

منذ 4 years53:26

53:26

Knowing when to deliver the right education, to the right people, at the right time is critical in building security aware teams that succeed. However, when failing to maintain users engaged the organisation’s exposure to threats might be an even bigger challenge to solve. In this episode, we’ll diver deeper into how ‘limited attention’ can result into a security awareness-poor organisation and explore the different ways in which people learn, the importance of ‘Learning Science Principles’ in maximising the learning curve.…

Re-thinking The Human Factor with Bruce Hallas

1
What does it take for security teams to win in the cybersecurity fight? 55:44

منذ 4 years55:44

55:44

Cybersecurity awareness can be one of the most challenging items in any CISO, IT/Security team’s agenda as building a program that effectively drives awareness and cultural change can be daunting. After all what makes us human, makes us a risk! So, what does it take to win when it comes to driving user behaviour? In this episode, we’ll look at where do you start with a company-wide training program that aims to change behaviour and impact organisational culture. What barriers might you come across to get buy-in and how to overcome them.…

Re-thinking The Human Factor with Bruce Hallas

1
How technology can be a CISO's best friend in changing behaviour. 48:31

منذ 4 years48:31

48:31

Culture is an intrinsic part of what makes us human – it encompasses the social behaviour and norms found in human societies and their individuals. And, in a ‘always on’ digital society, that can only mean one thing – We Click! We click to open potentially malicious emails, infected files. We click to share information and then we click to share a bit more – all in a simple click of a button. In this episode, we explore how cultures are formed and influenced by digital, social media, and we touch on the role of technology in allowing organisations to drive security awareness and cultural change in today’s ‘NEW HQ’.…

Re-thinking The Human Factor with Bruce Hallas

1
Re-thinking the Human Factor: Cyber Security Mini Series 40:28

منذ 4 years40:28

40:28

Humans have achieved great things, from survival through to prosperity, and all because of how our brains have evolved. However, our physical and cognitive evolution lags behind Moores law and our brains just cannot cope with the amounts of information and huge number of decisions we need to make both consciously and unconsciously every day How do our brains cope and why does this coping mechanism make us vulnerable and keep CISO’s awake at night? In this episode Bruce and ProofPoint's in resident CISO Andrew Rose tackle this thorny question amongst a range of other interesting points…

Re-thinking The Human Factor with Bruce Hallas

1
A conversation with award-winning CISO, Andrew Rose 1:03:11

منذ 5 years1:03:11

1:03:11

A conversation with award-winning CISO, Andrew Rose ANDREW ROSE joins us for Series 3, Episode 12 of the Re-Thinking the Human Factor Podcast. Join us for this straight forward discussion with an award winning CISO who transformed security management for three major organisations. With his extensive background, Andrew is a strong relationship manager who is able to develop and lead teams, driving initiatives forward with a style that is facilitative, tenacious and positive. Able to communicate, co-ordinate and influence effectively at all levels and respond to challenges with dedication, enthusiasm and pragmatism. Andrew Rose is strongly focussed on sensible, cost effective security solutions being used to enable a business to innovate and develop. AS YOU LISTEN TO THE EPISODE, IF YOU FIND YOURSELF WANTING TO IMPLEMENT SOME OF THE INSIGHTS YOU’RE GAINING BUT YOU FEEL YOU NEED A LITTLE HELP, PLEASE DO GET IN TOUCH WITH ME AT: bruce.hallas@re-thinkingthehumanfactor.com JOIN ANDREW ROSE AND BRUCE HALLAS AS THEY DISCUSS: The early days of cyber security and how people almost gave up on the human factor. How the idea of applying the knowledge of human awareness came into play. Challenges today’s cyber security managers face. How can you be safe if you are not secure? The key indicators to a healthy security culture. The influences that help to drive our decision-making and behaviour. Designing cyber security awareness and training with the human in mind. How to win over people to try something new. How hackers think. RESOURCES AND TOPICS FOR FURTHER STUDY B.J. Fogg and his new book, "Tiny Habits" The Analogies Project MORE ABOUT ANDREW ROSE: LinkedIn Twitter Please subscribe to the podcast in iTunes , and if you enjoyed this interview, please share with your friends and colleagues and leave a 5 star rating and review. Thanks for listening and sharing. Bruce & The Re-thinking the Human Factor Podcast Team…

Re-thinking The Human Factor with Bruce Hallas

1
Know your cyber security risks, with Prudence Smith 47:03

منذ 5 years47:03

47:03

Know your cyber security risks with Prudence Smith PRUDENCE SMITH joins us for Series 3, Episode 11 of the Re-Thinking the Human Factor Podcast. Join us as we discuss risk assessment within a changing cyber landscape. We know our listeners are going to glean a great deal from this discussion this week and enjoy the fruits of Prudence’s years of experience. PRUDENCE SMITH is a trusted cyber and security risk professional who has been working in security, technology and compliance in a career spanning over 20 years, working in large multinational financial institutions, senior management, client and government liaison, high-risk targets, intelligence and SMB infrastructures. So put the kettle on, sit back and enjoy this riveting discussion as Prudence explains the importance of understanding the ever changing landscape of cyber security risk. AS YOU LISTEN TO THE EPISODE, IF YOU FIND YOURSELF WANTING TO IMPLEMENT SOME OF THE INSIGHTS YOU’RE GAINING BUT YOU FEEL YOU NEED A LITTLE HELP, PLEASE DO GET IN TOUCH WITH ME AT: iwanttoknowmore@re-thinkingthehumanfactor.com TOPICS DISCUSSED: When/why human behaviour become a focus in the cyber security industry. How an audit lead to the investigation into the human factor. Cyber security awareness. Risk-based profiling. Cyber Security Education, Awareness and Culture. What impact events such as the Coronavirus have on culture and awareness. RESOURCES AND TOPICS FOR FURTHER STUDY RSA Conference The Analogies Project Consumer Data Research Report MORE ABOUT TERRY O’REILLY: LinkedIn Twitter Please subscribe to the podcast in iTunes , and if you enjoyed this interview, please share with your friends and colleagues and leave a 5 star rating and review. Thanks for listening and sharing. Bruce & The Re-thinking the Human Factor Podcast Team…

Re-thinking The Human Factor with Bruce Hallas

1
Marketing Strategy Applied To Cyber Security with TERRY O’REILLY. 1:02:29

منذ 5 years1:02:29

1:02:29

Marketing Strategy Applied To Cyber Security with TERRY O’REILLY TERRY O’REILLY joins us for Series 3, Episode 10 of the Re-Thinking the Human Factor Podcast. Join us as we delve into the brilliant marketing mind of our guest so we can apply this understanding to our industry of cyber security and awareness. Terry O’Reilly is the host of CBC Radio's Under the Influence. Co-Founder of The Apostrophe Podcast Company. He is also an engaging speaker and author to boot, with over 35 years of experience as an adman. He discusses the bigger issues of marketing and how it affects the public. But most of all, Terry connects the dots when it comes to pop culture, human nature and the numerous gales and undertows that effect communication. Sprinkled, of course, with the humour required to deal with it all. AS YOU LISTEN TO THE EPISODE, IF YOU FIND YOURSELF WANTING TO IMPLEMENT SOME OF THE INSIGHTS YOU’RE GAINING BUT YOU FEEL YOU NEED A LITTLE HELP, PLEASE DO GET IN TOUCH WITH ME AT: iwanttoknowmore@re-thinkingthehumanfactor.com JOIN TERRY O’REILLY AND BRUCE HALLAS AS THEY DISCUSS: Marketing, and its application to cyber security and awareness. Shish Kebab Theory. The long game of cyber security awareness and training. Strategies for effectively marketing cyber security campaigns. How to gain an understanding of your target audience. Are people gathering data frequently enough? Understanding and aligning your company’s values with your cyber security goals RESOURCES AND TOPICS FOR FURTHER STUDY This I Know - By Terry O'Reilly The Analogies Project MORE ABOUT TERRY O’REILLY: LinkedIn Company LinkedIn Page Under The Influence Podcast Please subscribe to the podcast in iTunes , and if you enjoyed this interview, please share with your friends and colleagues and leave a 5 star rating and review. Thanks for listening and sharing. Bruce & The Re-thinking the Human Factor Podcast Team…

Re-thinking The Human Factor with Bruce Hallas

1
Why we need to re-think the human factor in security, with Bruce Hallas 1:09:48

منذ 5 years1:09:48

1:09:48

Why we need to re-think the human factor in security, with Bruce Hallas Bruce Hallas sits in the hot seat for a change as Alexia of Marmalade Box grills him, for this: Series 3, Episode 4 of the Re-Thinking the Human Factor Podcast. Having received a lot of emails asking us for more information about Bruce Hallas, the host of this podcast, Alexia agreed to put Bruce through some viewer lead questioning in the hopes of delving deeper into his background and expertise. Having trained in accounting and law, Bruce started his work life in business development, outside the realms of tech, and found himself passionate about security awareness and human behaviour. Via a series of questioning, 7 years ago Bruce was lead to his groundbreaking research that lead to his book ‘Rethinking The Human Factor’. Apart from his work as a researcher and author, he also runs Marmalade Box, a company dedicated to helping organisations cultivate and design a positive security awareness by raising awareness and influencing behaviours. Bruce is an expert in reducing risk and helping companies design security processes that reduce the guesswork from the human factor. We know you will enjoy listening to how and why Bruce is so passionate about his chosen occupation and how you can benefit from his vast understanding. AS YOU LISTEN TO THE EPISODE, IF YOU FIND YOURSELF WANTING TO IMPLEMENT SOME OF THE INSIGHTS YOU’RE GAINING BUT YOU FEEL YOU NEED A LITTLE HELP, PLEASE DO GET IN TOUCH WITH ME AT: iwanttoknowmore@re-thinkingthehumanfactor.com JOIN BRUCE HALLAS AND ALEXIA AS THEY DISCUSS: The questions Bruce asked himself when he started his research journey. How understanding the human factor allows for better engagement. Breaking down the entire system within information security to better the process. The Analogies Project and how analogies help in shaping culture and behaviour. Who benefits the most from the Rethinking The Human Factor research? Designing with the human in mind. Does evidence point to the validity of the frame work created from the research done in Rethinking The Human Factor? The importance of establishing a cohesive vision as an anchor. How personal values influence culture. What can my organisation do to benefit from this? RESOURCES AND TOPICS FOR FURTHER STUDY Rethinking The Human Factor by Bruce Hallas Nudge by Richard H. Thaler The Power Of Analogy by Dieter Wanner MORE ABOUT BRUCE HALLAS: LinkedIn Marmalade Box The Analogies Project Please subscribe to the podcast in iTunes , and if you enjoyed this interview, please share with your friends and colleagues and leave a 5 star rating and review. Thanks for listening and sharing. Bruce & The Re-thinking the Human Factor Podcast Team…

Re-thinking The Human Factor with Bruce Hallas

1
Taking risks to reduce risk, with Eric Ravello 1:05:18

منذ 5 years1:05:18

1:05:18

Taking risks to reduce risk, with Eric Ravello If criminals are doing research into human behaviour then they are designing phishing attacks with the human in mind. As attackers change their attacks, so must cyber security providers change their methods of dealing with them. Eric Ravello joins us for Episode 33 of the Re-Thinking the Human Factor Podcast. We are holding strong to our promise to bring you top notch guests this week, we cannot wait to delve into this podcast topic. Eric has more than 15 years of experience within cybersecurity, acquired with multiple programs in international environments. Eric loves to inspire confidence and create cooperation for people in long term strategy. He believes we can achieve a better environment by designing and managing positive security culture programs that respect all individuals. To transform his environment, he delivers attractive and engaging campaigns for all or tailored to specific business functions. He is not afraid to go against the grain and take risks. AS YOU LISTEN TO THE EPISODE, IF YOU FIND YOURSELF WANTING TO IMPLEMENT SOME OF THE INSIGHTS YOU’RE GAINING BUT YOU FEEL YOU NEED A LITTLE HELP, PLEASE DO GET IN TOUCH WITH ME AT: iwanttoknowmore@re-thinkingthehumanfactor.com RESOURCES AND TOPICS FOR FURTHER STUDY Re-Thinking The Human Factor E-Book The Analogies Project MORE ABOUT ERIC RAVELLO: LinkedIn Please subscribe to the podcast in iTunes , and if you enjoyed this interview, please share with your friends and colleagues and leave a 5 star rating and review. Thanks for listening and sharing. Bruce & The Re-thinking the Human Factor Podcast Team…

Re-thinking The Human Factor with Bruce Hallas

1
Simplifying Cyber Security, with Neil Frost 53:13

منذ 5 years53:13

53:13

NEIL FROST joins us for Series 3, Episode 7 of the Re-Thinking the Human Factor Podcast. Join us for this straight forward discussion on how to cultivate easy to digest security campaigns that have the lasting effect of benefiting culture. Neil Frost was part of the team responsible for Security Awareness and Culture at the HMRC (the UK Tax Office). Before that he worked at the UK Police Force on Training and Awareness. AS YOU LISTEN TO THE EPISODE, IF YOU FIND YOURSELF WANTING TO IMPLEMENT SOME OF THE INSIGHTS YOU’RE GAINING BUT YOU FEEL YOU NEED A LITTLE HELP, PLEASE DO GET IN TOUCH WITH ME AT: iwanttoknowmore@re-thinkingthehumanfactor.com JOIN NEIL FROST AND BRUCE HALLAS AS THEY DISCUSS: Defense against cyber attacks. Tips to make your cyber security training efforts more effective. How budgeting effects training outcomes. How perceptions can block the flow of information. Using data to create security training around the needs of your organization rather than throwing something against the wall and hoping it sticks. How to get the real data rather then answers given "just to please". Implementing lasting behavioural change through messaging and stories. Story telling as a means of communication is hard wired into human behaviour. Finding the right tools such as software platforms and technology to create your solutions. RESOURCES AND TOPICS FOR FURTHER STUDY Wired For Story The Analogies Project MORE ABOUT NEIL FROST: LinkedIn Bobs Business Bobs Business (Twitter) Please subscribe to the podcast in iTunes , and if you enjoyed this interview, please share with your friends and colleagues and leave a 5 star rating and review. Thanks for listening and sharing. Bruce & The Re-thinking the Human Factor Podcast Team…

Re-thinking The Human Factor with Bruce Hallas

1
The Accidental Security Specialist, with David Shipley 55:22

منذ 5 years55:22

55:22

The Accidental Security Specialist, with David Shipley. Living up to our promise to bring you fantastic guests, David Shipley joins us for Series 3, Episode 6 of the Re-Thinking the Human Factor Podcast. Time to go phishing so grab your rod. David is a self professed accidental cyber security professional, but has spent time as a soldier, newspaper reporter and marketer. After a cyber hack within his company occurred, David grew increasingly interested in cyber security and was asked to take on this role within his company. Currently based in Canada, David is an award-winning entrepreneur and head of Beauceron Security. Beauceron's holistic approach to measuring and reducing cyber risk brings together threat intelligence, user education and awareness, simulated attacks and real incident data into an easy-to-use and deploy cloud platform that transforms cybersecurity from an IT-centric issue into a pan-organization management opportunity. AS YOU LISTEN TO THE EPISODE, IF YOU FIND YOURSELF WANTING TO IMPLEMENT SOME OF THE INSIGHTS YOU’RE GAINING BUT YOU FEEL YOU NEED A LITTLE HELP, PLEASE DO GET IN TOUCH WITH ME AT: iwanttoknowmore@re-thinkingthehumanfactor.com IN THIS EPISODE, DAVID SHIPLEY AND BRUCE HALLAS DISCUSS: The sheepdog effect. Turning the cyber victims into defenders. Empowering the person. The importance of driving behavioural reinforcement within a culture to keep positive cyber security behaviour thriving. Getting the metrics correct- Repeat clickers and what we can learn. Taking the time to make sure people really retain new cyber security-related information and behaviours. Phishing fallibility: Is someone’s emotional state a factor to be considered? The 8 emotional scale. Fear response, social hi-jacking and engineering. How time affects people’s behaviour during a 24 hour period. The power of keeping calm. Speed can often be your enemy. The Power Model - what it is and how it can be used to boost cyber-security awareness: People, environment, actions and resources. Creating an easy to use protocol to gauge involvement. Learning from each other. Building a solid support structure. Black box culture - going deeper into more effective cyber security training: Talking about issues without laying blame. The story of the mayor that got phished. Learning from mistakes in proactive ways. Rewarding right behaviour. Scoring people and then helping them improve their performance within the security culture. Compliance: Exceeding compliance via relative, contextual, timely informative videos. Treat your audience like adults. Using Surveying as a tool to generate better metrics around risk and awareness: The importance of your baseline and the importance of a good survey. How does bias affect survey answers and are there ways around it? Using video responses to surveying to offer training in weak spots and offer guidance and support to colleagues. Start a positive feedback loop. Phishing attacks and data strategy. Data gathering from ‘time to click’ data proves to be very fruitful at limiting risk. Huge amounts of data are available to be mined to design cyber security awareness and education pieces that change behaviour. Having a strategy for data gathering is crucial. Learning when people click leads to a defined process towards a positive security culture. Cyber Security Marketing. The same tools that marketing applies can be used when trying to form a new culture of awareness within a business. What is a KPI clash? Where is the cyber security industry failing? Not enough focus on the human factor. Not enough funding for training. Real meaningful change comes with data and planning correctly Data driven decision making around security awareness. The need for sharing resources exists to help strengthen the entire security industry. RESOURCES AND TOPICS FOR FURTHER STUDY More about heuristics The Analogies Project Black Box Thinking MORE ABOUT DAVID SHIPLEY: LinkedIn Beauceron Security Twitter Please subscribe to the podcast in iTunes , and if you enjoyed this interview, please share with your friends and colleagues and leave a 5 star rating and review. Thanks for listening and sharing. Bruce & The Re-thinking the Human Factor Podcast Team…

Re-thinking The Human Factor with Bruce Hallas

1
Designing Learning Experiences That Stick, with Megan Sumeracki 1:04:31

منذ 5 years1:04:31

1:04:31

DESIGNING LEARNING EXPERIENCES THAT STICK, WITH MEGAN SUMERACKI Megan Sumeracki joins us for Series 3, Episode 5 of the Re-Thinking the Human Factor Podcast. Megan Sumeracki is an Assistant Professor at Rhode Island College. She co-founded the Learning Scientists in January 2016 with Yana Weinstein. Megan received her Master’s in Experimental Psychology at Washington University in St. Louis and her PhD in Cognitive Psychology from Purdue University. Her area of expertise is in human learning and memory, and applying the science of learning in educational contexts. WHAT'S THIS EPISODE ABOUT? As cyber security practitioners, we often ask ourselves the question of how we get people to remember to do the things we tell them to do. How do we get them to retain what we teach them in our trainings? Well, you’re in luck. This conversation is full of treasures to do with how our brains work when learning and strategies (based on scientific evidence) that can help you create training situations where the information will be more likely to stick. Side Note -- We touch a lot on something called Retrieval Practice . Retrieval practice is simply a strategy in which bringing information to mind enhances and boosts learning. It’s about deliberately pulling what we’ve learned back out of our heads to examine it. Megan addresses empirical questions such as: What retrieval practice formats promote student learning? What retrieval practice activities work well for different types of learners? And, why does retrieval increase learning? AS YOU LISTEN TO THE EPISODE, IF YOU FIND YOURSELF WANTING TO IMPLEMENT SOME OF THE INSIGHTS YOU’RE GAINING BUT YOU FEEL YOU NEED A LITTLE HELP, PLEASE DO GET IN TOUCH WITH ME AT: shortcuts@re-thinkingthehumanfactor.com BELOW IS A MORE DETAILED OUTLINE OF WHAT MEGAN AND I DISCUSSED: Understanding how we learn information and how we apply and remember it. The goal of education is to teach students how to learn and retain information so they can use it in the future. The key words: Learn, memory, retain, apply. Even though a student needs to pass exams and get grades, it is more useful to retain information and are able to apply it in the future. Standardised testing could be improved as education needs to create a new behaviour rather then just stored information. Creating tests that mimic the real world can help people retain and then use new information. Data driven approach. Just because we enjoy certain methods of learning does it mean it will help me retain any new information? Challenging the way we learn can push us towards more durable learning processes. Instinct and intuition do not answer the question of education necessarily. Building effective strategies. Why cramming does not relate to long term memory of a topic. Understand what it is that helps people learn and retain information over a longer period of time. Retrieval practice bringing things to mind, spacing practice, spreading learning over a period of time. It is difficult to predict an individual way of learning rather then a larger group on average. Confirmation bias can muddy research waters. Expecting to see something can create patterns. Finding ways to remove bias such as breaking a theory down to disprove it. Results free of bias lead to stronger data. Spacing and retrieval. Spacing and retrieval have been around since the 1800s and used repeatedly. How the true value of all knowledge and understanding is application. The art of communication. Student driven research into learning through accessibility. What other misunderstandings do people have around learning? Designing with the human in mind. The cognitive process. Getting the information in is only one step, you have to be able to get the information back out and apply it. Retrieval cues and how they help. The importance of finding ways to bring back to mind recently learned information to help it stick. Bridging the gap from study to new awareness and understanding. Situational awareness building can help develop new behaviours. Encoding information does not necessarily lead to retrieval. Storytelling as a way to help retrieve new information. Holding interest to hold attention. Does interest really govern retention? If a person likes engaging they will likely engage more with a topic or action. Attention span can often be affected by external influence like eating breakfast and rest. Bite sized learning spread out over a longer period can aid retention. Sometimes ’seductive details’ can be distracting even if entertaining. RESOURCES AND TOPICS FOR FURTHER STUDY Understanding How We Learn: A Visual Guide Elizabeth Loftus More on Retrieval Practice FIND MEGAN SUMERACKI ONLINE: LinkedIn Twitter Learning Scientists Website Please subscribe to the podcast in iTunes , and if you enjoyed this interview, please share with your friends and colleagues and leave a 5 star rating and review. Thanks for listening and sharing. Bruce & The Re-thinking the Human Factor Podcast Team…

مرحبًا بك في مشغل أف ام!

يقوم برنامج مشغل أف أم بمسح الويب للحصول على بودكاست عالية الجودة لتستمتع بها الآن. إنه أفضل تطبيق بودكاست ويعمل على أجهزة اندرويد والأيفون والويب. قم بالتسجيل لمزامنة الاشتراكات عبر الأجهزة.