Engagement through Entertainment: How to Make Security Behaviors Stick
summary
Claims that emotion beats fear drive a research-backed approach: an Osterman survey of 1,000 finds users who rate training very interesting are 13× more likely to change behavior, while ~75% say current programs aren’t engaging. Concrete examples include the ProtectConnect PSA (Michael B. Jordan, Tessa Thompson), Canada’s cat-themed ransomware spots, a risqué New Zealand film for parents, student-made Texas A&M shorts, and an upcoming Kubikle series (8–10 episodes). Practical steps: brainstorm beyond security, borrow cultural formats, start small, and prep leadership for pushback.
AI-written summary · about
chapters (19)
- 0:00Introduction to speakers
- 1:03Epidemic of boring security training
- 4:12Science behind behavior change
- 6:48Agenda and training challenges
- 9:44Transforming boring to engaging
- 12:32Examples of bad security training
- 14:18User engagement statistics
- 16:30Unexpected training examples
- 20:43Humor in security education
- 24:58Removing fear from training
- 26:43Amazon’s Protect Connect campaign
- 30:55Kubikle dark comedy series
- 34:54Five actionable steps
- 35:15Brainstorming with trendsetters
- 36:19Stealing ideas creatively
- 37:00Being relatable in training
- 39:07Start small with freelancers
- 39:48Handling criticism of edgy content
- 42:16Q&A and closing remarks
related talks
30mThe Power of Persuasion: Better Security Through... Manipulation?
40mLike, Share and Subscribe: Effective Communication of Security Advice
32mFrom Awareness to Engagement: How to Think Like a Marketer & Turn Employees Into Best Defence
30mSurfing the Motivation Wave to Create Security Behavior Change
48mHow to build a security mindset
46mLet’s Blow Up Security Awareness and Start Over
21mThe Effect of Entertainment Media on Mental Models of Computer Security
13mPeople-Centric Security: From Awareness to Culture