Explore a thought-provoking talk from DefCamp 2018 that challenges conventional approaches to cybersecurity. Delve into the speaker's insights on why focusing solely on user behavior is misguided and learn strategies to create more effective security practices. Discover how to address real-world consequences, overcome security feature failures, and engage both employees and management in cybersecurity efforts. Gain valuable perspectives on tackling common challenges such as lack of education, training fatigue, and security theater. Examine innovative approaches like gamification and leading by example to foster a stronger security culture within organizations.
You're Right, This Talk Isn't Really About You - DefCamp - 2018
Overview
Syllabus
Intro
Youre right
Our problem
Why are we looking at users like that
How to stop being cyber idiots
People will do what is required
People dont do things outside of their job
Realworld consequences
Security features fail
Question time
Biggest challenge
Lack of education
Training
Engagement
Security Theater
How to talk to management
Biggest impediment
Vulnerability
Leading by example
Approaching the problem
Gamification
Battle fatigue
Taught by
DefCamp
