Human compliance in cybersecurity continues to be a persistent problem for organizations. This research-in-progress advances theoretical understanding of the negative effects of trust formed between individuals and the cybersecurity function (i.e., those responsible for protection), cybersecurity system (i.e., the protective technologies), and organization (i.e., those verifying the cybersecurity department) that leads to suboptimal compliance behaviors. In contrast to the current information se...

Black Hat speaker proposes framework to reduce the negative consequences of risky user actions and encourage them to follow security's advice.

tl;dr: phishing "training" is CRAP and DOES NOT WORK and MAKES THINGS WORSE

When are infosec departments going to stop being JERKS with phishing "training."

Not great. Useful as a compare/contrast.

Multilingual environment; cross-linguistic vocab/jargon issues possibly pointing at a lack of reliable information in non-English non-Afrikaans languages.

The Analogies Project is a global Information Security initiative aimed at demystifying the subject and engaging audiences through a series of initiatives.