Partnering with HR to Build a Culture of Cybersecurity
summary
Security pairs with HR to change behavior, not just push slides: replace annual training with monthly 3–5 minute micro-training, make completion a policy requirement tracked in reviews, add new-hire presentations, lunch-and-learns, swag and philanthropy to normalize cyber, and put managers on the hook. The result is measurable: phishing click rate drops from >30% to <3% across nine months, repeat offenders stop repeating, and an incident that changed payroll routing is caught and reversed because employees ask the verification question.
AI-written summary · about
chapters (10)
- 0:00Start
- 2:45Introduction
- 13:37Building on Existing Culture
- 19:04Culture of Cybersecurity
- 21:13Root Cause Analysis
- 23:41People
- 25:24Metrics
- 27:37Another Change Request
- 29:56First Steps
- 33:48RSAConference 2021
related talks
44mUnlikely Allies: How HR Can Help Build A Security-First Culture
44mDeveloping Cybersecurity - How do you make Staff Know Security
52mWho Says Cybersecurity Can’t Be Creative?
13mPeople-Centric Security: From Awareness to Culture
43mShifting Organizational Culture through Cyber-Awareness
03mBuilding a culture of security at the New York Times
24mConcrete Steps to Create a Security Culture
29mMore Than Just a Pretty Penny! Why You Need Cybersecurity in...