What role training materials must play in building security aware-rich organisations?

Re-thinking The Human Factor with Bruce Hallas

Player FM - Internet Radio Done Right

33 subscribers

Додано eight років тому

المحتوى المقدم من Bruce Hallas and Marmalade Box. يتم تحميل جميع محتويات البودكاست بما في ذلك الحلقات والرسومات وأوصاف البودكاست وتقديمها مباشرة بواسطة Bruce Hallas and Marmalade Box أو شريك منصة البودكاست الخاص بهم. إذا كنت تعتقد أن شخصًا ما يستخدم عملك المحمي بحقوق الطبع والنشر دون إذنك، فيمكنك اتباع العملية الموضحة هنا https://ar.player.fm/legal.

Standup Comedy "Your Host and MC"

1
Mack Dryden "Dentist Visit" Bonus Show #119 7:46

منذ 4 أيام7:46

التشغيل لاحقا

قوائم

إعجاب

احب

7:46

Send us a text On this very funny short Bonus Show, standup comic Mack Dryden shares his story about going to the Dentist...you'll never believe what happens...Hilarious! Look for Mack Dryden's "NEW" Dry Bar Comedy Special... Please Listen, Enjoy, and Share where you can...Thanks!! Support the show Standup Comedy Podcast Network.co www.StandupComedyPodcastNetwork.com Free APP on all Apple & Android phones....check it out, podcast, jokes, blogs, and More! For short-form standup comedy sets, listen to: "Comedy Appeteasers" , available on all platforms. New YouTube site: https://www.youtube.com/@standupcomedyyourhostandmc/videos Videos of comics live on stage from back in the day. Please Write a Review: in-depth walk-through for leaving a review. Interested in Standup Comedy? Check out my books on Amazon... "20 Questions Answered about Being a Standup Comic" "Be a Standup Comic...or just look like one"…

منذ 4 أعوام 53:26

MP3•منزل الحلقة

Knowing when to deliver the right education, to the right people, at the right time is critical in building security aware teams that succeed. However, when failing to maintain users engaged the organisation’s exposure to threats might be an even bigger challenge to solve.

In this episode, we’ll diver deeper into how ‘limited attention’ can result into a security awareness-poor organisation and explore the different ways in which people learn, the importance of ‘Learning Science Principles’ in maximising the learning curve.

59 حلقات

What role training materials must play in building security aware-rich organisations?

Re-thinking The Human Factor with Bruce Hallas

33 subscribers

published منذ 4 أعوام

MP3•منزل الحلقة

59 حلقات

كل الحلقات

1
Lessons from the world of coffee! 1:17:47

منذ عام واحد1:17:47

1:17:47

1
Key performance metrics 1:11:18

منذ عام واحد1:11:18

1:11:18

In this episode we re-visit an earlier theme explored in this series. The theme of mesurement and metrics. The question of how to measure awareness, behaviour or culture is something we consistently come across here at Re-thinking the Human Factor when exploring opportunities to work with clients. There's an palpable feeling, across industry chatter, that there's a real lack of maturity when it comes to how we demonstrate the effectiveness of our effrots to influence employee awareness, behaviour and culture. However, there is hope. In this episode I talk with Bernie Smith. Bernie has a focus on KPI's, not just your standard range but also he brings ideas about how you might create new metrics as well. We discuss his view on the development of metrics and how metrics can help not just measure performance but ultimately influence behaviour and shape culture.…

1
The security function's culture. 45:31

منذ عام واحد45:31

45:31

In this episode we take a peek at the role of the security teams’ own culture and its impact on the broader organisational culture. This, is an important perspective, because whilst many commentators focus on influencing organisational culture they haven’t considered the role that the value and behaviours of the security team has in influencing positive security outcomes across the business. To help us explore this perspective, on cultural forces at play, we have a guest who knows a thing or two about how cultures are formed and influenced. Lianne Potter studied in social anthropology, then geeked out on technology before combining the two to shape an industry career which has achieved numerous accolades for her thought leadership in not just the human factor but also information security generally. Lianne, for me, illustrates a small, but growing force within the industry that recognises that the human factor needs to be repositioned not as an after thought once all the work of designing security controls has been done, but as a critical and key part of the process of understanding and managing information security risk. ©Copyright Marmalade Box Limited The content of this podcast is the property of Marmalade Box Limited. Any use of the content of the podcast, either in full or partially, will be considered an infringement of Marmalade Box Limited rights as sole owners of this content. Any enquiries about the use of this content should be directed to Marmalade Box Limited. Contact information can be found at www.marmaladebox.com .…

1
An appointment with the Doctor to discuss culture, behaviour and decision making. 44:57

منذ عام واحد44:57

44:57

If you’re a regular listener then you will have already met today’s guest Dr. Char Sample. Char is a force at work deep within the information security community. Char is a rarity, combining a deep knowledge of both the technical and human aspects of the challenges security professionals face when managing cyber security risks. Char and I go back a long way, to a horrible conference lunch in London, where her riveting conversation meant I didn’t have to eat what was on the plate in front of me. I have been forever grateful. That riveting conversation was all about our shared understanding of how culture influences everyone’s day to day behaviours and how everyday behaviours make up culture. That shared interest has led to many conversations and shared ideas about how the information security industry could step up a level by seeing the potential for improving how we assess and manage human factor risks. In this episode we capture one of those conversations. We talk about heuristics and biases, what they are and what role they might have in artificial intelligence. Why what makes us human often makes us behave in seemingly irrational ways even when presented with all the data we need and assumptions we frequently make when developing and designing systems and processes and how this is undermining the management of business risks. Be warned, there's a lot of laughter in this episode.…

1
Insights from advertising for security awareness professionals. 57:08

منذ عام واحد57:08

57:08

In this episode we are joined by a guest who has committed their career to the world of advertising agency work. Influencing target audiences awareness of products and stacking the odds in their clients favour, that the target audience will choose their product over their competitors. The challanges our guest has faced, over the years, are in many ways similar to those that education and awareness managers, for information security and data protection, now face.…

1
A Human Resource view on Information Security Awareness and Education 46:59

منذ عام واحد46:59

46:59

The role of the human resources function, in the the overall process of employee awareness, behavioru and culture can't be under stated. In the early days of my research, at Re-thinking the Human Factor, it was very apparent that HR was a major stakeholder. From what I like to call KPI's clash, where stakeholders KPI's sometimes clash against each other, through to employee performance and development, and from HR processes such as starters, movers and leavers, through to organisational change. The HR department can add a lot of value to the process of delivering change in employee security awareness, behaviour and culture if you work on fostering a beneficial releationship. With that in mind I wanted to invite a guest who excels in the area of organisational development, epople management and HR. Our guest, Anne Benedict, stepped right up and agreed to share some insights into the challange of employee awareness and education, from a HR perspective.…

1
Embracing Diverse Skills When Building an Effective Education and Awareness Team. 52:00

منذ عام واحد52:00

52:00

When I first got involved in “information security” 20+ years ago, I found myself almost entirely surrounded by industry peers whose training and experience was in technology or technology disciplines. My training in law, marketing and finance, and my experience in business development, marketing, recruitment and even a stint in purchasing and supplies all seemed out of line with the world of IT security as it was called back then. As I came to understand, during my own research in human behaviour and culture, my lack of an education in technology meant I was culturally and even physically wired differently. This meant I looked at things through a different set of lenses. The result, was an approach that we would now call governance, risk and compliance. However, it was these very human disciplines, which led me to fundamentally think differently when it came to kicking off the Re-thinking the Human Factor research programme. Our guest Lana McGill, to me, enshrines the change in direction of an increasing number of forward thinking security professionals looking for a more mature approach to employee awareness, behaviour and culture. Lana believes that by diversifying their search for skills and experience, outside of the traditional industry expectations, you can bring new insights and energy to the challenge of influencing employee behaviour and culture. Her role as a senior information security leader, in the finance sector, and her willingness to embrace other skills and experiences in the search for more effective interventions, gives hope that the industry inertia, when it comes to the human factor, may finally be shifting. ©Copyright Marmalade Box Limited The content of this podcast is the property of Marmalade Box Limited. Any use of the content of the podcast, either in full or partially, will be considered an infringement of Marmalade Box Limited rights as sole owners of this content. Any enquiries about the use of this content should be directed to Marmalade Box Limited. Contact information can be found at www.marmaladebox.com .…

1
The Science Behind Metrics 50:06

منذ عام واحد50:06

50:06

Finding relevent metrics, for security awareness, behaviour and culture has been a long standing challenge which the information security industry has struggled hard to address. Now, when I reflect on how I personally tackled metrics, around the human factor, before I kicked off my research programme here at Re-thinking the Human Factor, I recognise I had an in-mature approach. That approach focused on what data I knew I could get rather than what was useful. Some industry folks called this "vanity metrics." That's all changed now, and that change started off, with getting back to basics by looking at what the science of measurement had to say. In this episode our guest and I talk about the sceince of measurement, how it is has evolved to enable human kind to progress at every stage of human evolution and how this knowledge might shine a light on the challenge of finding effective metrics when it comes to employee awareness, behaviour and culture. If you want to know more about how we have used this and other insights into metrics to support information security professionals measure the effectiveness of their programmes to influence security awareness, behaviour and culture then visit www.re-thinkingthehumanfactor.com and register for the monthly webinar.…

1
Insights from Educational Psychology for Information Security Professionals 1:18:35

منذ عام واحد1:18:35

1:18:35

Educating employees on their roles and responsilities when it comes to information security and data protection, is common sense, and, even if you don't think that's the case, it is, without a doubt, a regulatory obligation for many. So, what is "education" and what is going on in the world of learning and development which might help us to re-think the human factor? In this episode our guest, Teisa Marshik, a respected educational psychologist and passionate educator, shares how her's and her colleagues approach to educating learners is changing. We cover everything from how the effectiveness and success of education is measured, through to how advances in our understanding of human behaviour and culture, mean we now recognise that students are consuming and responding to education content based on their own life experiences and situations and what this means for traditional best practices in L&D.…

1
Understand the forces at play. 54:25

منذ 3 أعوام54:25

54:25

Our guest, is Dr. Ben Evans. Ben is an aeronautical engineer, and he’s applying his understanding of the forces at play, to the seemingly insurmountable challenge of conquering the breaking a world record at the Bloodhound Land Speed Project. Ben talks about the laws of science and engineering which help him to find the marginal opportunities for improvement which are helping the team towards breaking the world record. But, in this interview, it’s also clear to me, that success is a matter of teamwork often with colleagues with different and sometimes conflicting priorities. Understanding the forces at play includes understanding science and nature, even when it comes to human awareness, behaviour and culture, but it’s also about understanding the forces at play across stakeholders, where often conflicting priorities and interests can arise. Getting the “Team” aspect right, you could argue is as important as the science which drives decision its self.…

1
The human factor. A view from Brazil. 48:40

منذ 3 أعوام48:40

48:40

In this episode we look through the eyes and experiences of an education and awareness manager from Brazil. We explore the consistent challenges, no matter where you are or what your culture is, when it comes to employee awareness, behaviour and culture.

1
Versace, Burberry and Lacoste. Thoughts from branding. 47:52

منذ 3 أعوام47:52

47:52

In this episode we delve into the world of branding with the out standing Geraldine Michel and explore possibilities for security professionals responsible for the human factor. We draw on lessons from the world of fashion, by skirting through branding and how Brand Directors and Managers utilise this mammoth of the modern day commercial world to shape and influence behaviour and culture.…

1
An internal communications perspective. 1:04:52

منذ 3 أعوام1:04:52

1:04:52

Internal communications is a major stakeholder in employee awareness, behaviour and culture. We often defer to their skills and experience as the specialists in communication strategy for reaching out to internal staff. However, there's something a foot in the industry. Traditional ideas of what makes "good internal communications" are being challenged and our good friend "behavioural science" has been a great influence on the thought leaders in the field of communications. In this episode I talk with one such thought leader.…

1
The human factor in the middle of a major security breach. 51:03

منذ 3 أعوام51:03

51:03

In previous episodes of the podcast we have explored why human judgement and decision making, which drives our behaviour, is heavily influenced by the environment within which we make our decisions. In this episode we take this one step further and ask how employee awareness, behaviour and culture pans out, after all of the theorising and planning, when the tranquil environment of corporate learning is replaced by the rawness of a major security crisis.…

1
CyberSecurity ABC's 1:01:23

منذ 4 أعوام1:01:23

1:01:23

In this episode I am joined by my co-authors, Adrian, Ciaran and Jess, of the CyberSecurity ABC’s book for a long overdue catch up. We hadn’t been able to spend anytime chatting for a while and so it was fabulous to get us all together again to enjoy having a talk about security awareness, behaviour and culture. We touch on not just the challenge of employee awareness, behaviour and culture but also about industry stakeholder’s roles in recognising the long overdue need for change. We explore the role of the environment in people’s decision making through the way Covid 19 has shaped not just the world but highlighted the need for continually re-assessing employee education and awareness. We tread the well-trodden path and saying that education and awareness doesn’t always deliver changes in behaviour and culture, and we ponder whether there needs to be a change in the language that industry uses to really break through the glass ceiling that’s been imposed on everyone responsible for employee education and awareness. It’s a great episode, touching on so much, with some laughter rolled in and a dodgy rendition of the Thompson Twin’s Doctor, Doctor track as well.…

مرحبًا بك في مشغل أف ام!

يقوم برنامج مشغل أف أم بمسح الويب للحصول على بودكاست عالية الجودة لتستمتع بها الآن. إنه أفضل تطبيق بودكاست ويعمل على أجهزة اندرويد والأيفون والويب. قم بالتسجيل لمزامنة الاشتراكات عبر الأجهزة.