PRIVACY + SECURITY BLOG

News, Developments, and Insights

Passwords Cartoon – Security Awareness Training

Here’s a cartoon I created to illustrate the importance of security awareness training.  I hope you find it amusing. […]

Read More…

New Resource Page: How to Make Security Training Effective

I recently created a new resource page —  How to Make Security Training Effective.  The page contains my advice for how  to make security training memorable and effective in changing behavior. Training the workforce is an essential way to protect data security, but not all training endeavors are successful.  Poor training is akin to shouting […]

Read More…

New Resource Page: Security Awareness Training FAQ

What laws require security awareness training?  What topics do the laws require to be covered?  What should be covered?  How frequently should training be given? I recently created a new resource page — Security Awareness Training FAQ — to answer the above questions and more.  I discuss various legal and industry requirements for security awareness […]

Read More…

Information Security Training: Focus on the Human Problem

I created a new poster about information security training, which is debuting at the RSA conference.  This poster is based on the fact that the vast majority of information security incidents and data breaches occur because of human mistakes.   Information security is only in small part a technology problem; it is largely a human problem. […]

Read More…

Spot the Privacy and Security Risks Training Game

I’m pleased to announce a new training program:  Spot the Risks: Privacy and Security. The program is a Where’s Waldo style risk-spotting game that takes about 5 minutes to complete.  Trainees are asked to spot the risks in an office.  Feedback is provided about each risk so trainees learn many of the most important best […]

Read More…