Conventional security awareness programs are designed to help people make better risk decisions and change poor security behavior. This sounds great but accomplishing change through an effective training program can be quite a struggle.  The challenge with many awareness programs is that just making someone aware of an issue is not enough to stimulate a behavioral change. Traditional security awareness training programs are a lot like long and boring journeys with no end in sight. Many individuals are asking themselves when these repetitive training courses will end, so they can get back to their real jobs.  Human emotion is one of the greatest threats to cybersecurity and not some vulnerability that can be simply patched. Understanding human psychology, how it works, and how to introduce some of its concepts into cybersecurity awareness training can make a huge difference in our training approach.   

Session Objectives: In this session, we’ll discuss the dangers of unaware employees and their risk to Enterprise Security, how to strengthen enterprise security by understanding human emotion, and how to building a better security awareness program