How to build a security mindset
summary
Claims 95% of breaches stem from human error and tests a Māori-inspired approach—kaiako and storytelling—to shift behaviour. Shows concrete practices: embed security in product design, standups and pull‑request reviews, use infra‑as‑code checks in AWS, add threat‑model questions to story templates, run relevant capture‑the‑flag ranges (OWASP) and grow security champions. Reports measurable wins: real policy shifts after immersive visits and employee-led phishing confessions that trigger code fixes. Watch if wanting reproducible tactics not just theory.
AI-written summary · about
chapters (11)
- 0:00Introduction
- 14:01Big Think Project
- 16:46catchments
- 22:06conflict
- 24:08three ideas
- 25:06kayako
- 27:21kayako in security
- 32:51telling a story
- 34:03what stories educate us
- 39:13what is a map
- 41:38security ranges
related talks
48mLevel Up Your Security Mindset
24mConcrete Steps to Create a Security Culture
20mBuilding security culture on infrastructure teams
52mLeveraging Psychological Needs For Building A Security Culture Amongst Developers
33mLearning from Past Security Breaches: Strengthening AppSec Efforts and Focus
52mContinuous Security
51mThinking Differently About Security
33mInterview with