Discover 10 reasons why security education programs often fall short in this conference talk from Converge 2015. Learn how to identify and address common pitfalls in security training, including ineffective resource allocation, misaligned priorities, and poor communication strategies. Explore practical tips for improving program effectiveness, such as making content relatable, incorporating engaging presentation techniques, and conveying the excitement of cybersecurity. Gain insights on overcoming managerial indifference, avoiding academic jargon, and implementing proper testing methods. Understand the importance of balancing compliance with genuine security awareness and discover strategies to make security education more accessible and impactful for all employees.
Overview
Syllabus
Intro
Hands Up
Waste of Time and Resources
Security Education Program
You Dont Care Enough
Compliance Isnt Security
The Wrong Approach
Contact Information
Managers Dont Care
Slow Slides
Team Management
Management
Make it Easy
You Dont Speak the Language
Academic Creep
Inside Info
Encrypted Disk
Dont Get Greedy
You Are A Terrible Speaker
You Have No Excuses
Toastmasters
Find Your Voice
Your Slides AreRidiculous
Walls of Text
Bullets
PowerPoint
Pictures
Presenter Notes
Behind the Curtain
Computer Based Training
Your Content Isnt Relatable
You Teach Your Receptionist Stuff
You Dont Test Repeat
You Treat It Too Much Like Work
The Most Accessible Joke
Keep It Relevant
You DontConvey The Cool
Lead Hackers
Contact Info
