Transformational Security Awareness

Expert guidance on the art and science of driving secure behaviors

Transformational Security Awareness empowers security leaders with the information and resources they need to assemble and deliver effective world-class security awareness programs that drive secure behaviors and culture change.

When all other processes, controls, and technologies fail, humans are your last line of defense. But, how can you prepare them? Frustrated with ineffective training paradigms, most security leaders know that there must be a better way. A way that engages users, shapes behaviors, and fosters an organizational culture that encourages and reinforces security-related values. The good news is that there is hope. That's what Transformational Security Awareness is all about.

Author Perry Carpenter weaves together insights and best practices from experts in communication, persuasion, psychology, behavioral economics, organizational culture management, employee engagement, and storytelling to create a multidisciplinary masterpiece that transcends traditional security education and sets you on the path to make a lasting impact in your organization.

• Find out what you need to know about marketing, communication, behavior science, and culture management

• Overcome the knowledge-intention-behavior gap

• Optimize your program to work with the realities of human nature

• Use simulations, games, surveys, and leverage new trends like escape rooms to teach security awareness

• Put effective training together into a well-crafted campaign with ambassadors

• Understand the keys to sustained success and ongoing culture change

• Measure your success and establish continuous improvements

Do you care more about what your employees know or what they do? It's time to transform the way we think about security awareness. If your organization is stuck in a security awareness rut, using the same ineffective strategies, materials, and information that might check a compliance box but still leaves your organization wide open to phishing, social engineering, and security-related employee mistakes and oversights, then you NEED this book.

Autorentext

PERRY CARPENTER is the Chief Evangelist and Strategy Officer for KnowBe4, the world's most popular security awareness and simulated phishing platform. A former security awareness researcher and CISO advisor at Gartner Research, he now works closely with Kevin Mitnick, arguably the world's most famous hacker. Perry frequently addresses management audiences at major cybersecurity conferences.

Klappentext
"I love seeing graduates of my Boot Camp use Behavior Design to address real-world problems. Perry does just that in Transformational Security Awareness, and the results are compelling."
BJ FOGG PHD, Researcher and Founder of the Stanford University Behavior Design Lab, Author of Tiny Habits: The Small Changes that Change Everything DO YOU CARE MORE ABOUT WHAT YOUR EMPLOYEES KNOW, OR WHAT THEY DO? Transformational Security Awareness offers a fresh, multidisciplinary approach to building a vital culture of awareness and secure behavior. Weaving together insights and best practices from experts in communication, persuasion, psychology, behavioral economics, organizational culture management, employee engagement, and storytelling, author Perry Carpenter empowers organizations to focus on the human element. The tools he provides let you create behavior change that enhances security at every level. What good is awareness if your people still don't care or behave in ways that reflect the security values that you are training on? Building secure users requires an intentional focus on behavior and cultural supports, finding actionable ways to intersect with users in the ways that will be most impactful; from relevant information, to behavioral interventions, to cultural and social supports and pressures. This book helps you optimize your security program to include and work with the realities of human nature. Using the insight provided by behavioral and marketing disciplines, you'll learn to engage users, shape behaviors, and foster an organizational culture that encourages and reinforces security-related values. Don't just change what your employees know, change what they do because actions not knowledge will determine whether your organization is breached or secure. With Transformational Security Awareness, you'll learn to account for the most important factor of your in your security program: the human factor. Discover how to:

• Overcome the knowledge-intention-behavior gap
• Teach security awareness using simulations, games, surveys, and other methods
• Recognize why technological security tools aren't enough
• Develop a well-crafted security awareness program that leverages effective training, behavior shaping techniques, and a network of 'culture carriers'
• Understand the keys to sustained success and ongoing culture change
• Measure your success and establish continuous improvements Here's what I know: "A transformational security awareness program will pay-off. In the same way that a steady stream of water over time will create a canyon; or that small amounts of money invested will, through the magic of compound interest, turn into large sums of money, your efforts do make a lasting impact!" Perry Carpenter

Zusammenfassung
Expert guidance on the art and science of driving secure behaviors

Transformational Security Awareness empowers security leaders with the information and resources they need to assemble and deliver effective world-class security awareness programs that drive secure behaviors and culture change.

When all other processes, controls, and technologies fail, humans are your last line of defense. But, how can you prepare them? Frustrated with ineffective training paradigms, most security leaders know that there must be a better way. A way that engages users, shapes behaviors, and fosters an organizational culture that encourages and reinforces security-related values. The good news is that there is hope. That's what Transformational Security Awareness is all about.

Author Perry Carpenter weaves together insights and best practices from experts in communication, persuasion, psychology, behavioral economics, organizational culture management, employee engagement, and storytelling to create a multidisciplinary masterpiece that transcends traditional security education and sets you on the path to make a lasting impact in your organization.

• Find out what you need to know about marketing, communication, behavior science, and culture management
• Overcome the knowledge-intention-behavior gap
• Optimize your program to work with the realities of human nature
• Use simulations, games, surveys, and leverage new trends like escape rooms to teach security awareness
• Put effective training together into a well-crafted campaign with ambassadors
• Understand the keys to sustained success and ongoing culture change
• Measure your success and establish continuous improvements
  Do you care more about what your employees know or what they do? It's time to transform the way we think about security awareness. If your organization is stuck in a security awareness rut, using the same ineffective strategies, materials, and information that might check a compliance box but still leaves your organization wide open to phishing, social engineering, and security-related employee mistakes and oversights, then you NEED this book.

Inhalt

Foreword xxi

Introduction xxiii

I The Case for Transformation 1

1 You Know Why 3

Humans Are the Last Line of Defense 4

Data Breaches Tell the Story 6

Auditors and Regulators Recognize the Need for Security Awareness Training 11

Traditional Security Awareness Program Me…