009 agents or how to empower people with security topic.
summary
Company builds trust, a three-part security team, and a cross-company community and turns security from ignored to desired by using simple rules, playful branding and events. Incident reporting drops from three–five days to seconds after introducing empathetic support and “inform your security officer” triage. Concrete actions include a written manifesto, 009 agents branding with T‑shirts and posters across seven locations, recurring Capture the Flag and escape‑room exercises, short ninja movies for awareness, and CEO buy‑in — engagement grows and the program goes viral.
AI-written summary · about
chapters (10)
- 0:00Introduction
- 1:58Trust through empathy
- 5:32Work with org not against
- 8:07Team for security success
- 10:36Partner across departments
- 14:12Expand security involvement
- 15:36Positive security community
- 21:38Make security fun
- 25:08Passion drives security culture
- 26:11Summary
related talks
24mConcrete Steps to Create a Security Culture
33mRapid-Fire Stories of Creative Solutions to InfoSec Problems
37mSecurity Culture Hacking: Disrupting the Security Status Quo
36mChampioning Security: Scaling Security at Every Level
20mBuilding security culture on infrastructure teams
13mPeople-Centric Security: From Awareness to Culture
57mThe building blocks of a culture of security
40mTotal Security: Investigative Perspectives from Public to Private Sector