Human Issues
Walter Williams · 2021
Engaging people in security awareness campaigns can learn a lot for how games work. Good games require people to learn the game in order to play it well, and that learning process is part of what makes people enjoy playing the game. Make security awareness fun, make it a game. Reward people for learning. A different approach is to reward each security bug found by the engineering team, and to reward speed of resolution. Every potential customer has no issues with excluding that control from the contract; know that they are making a business risk decision internally. There are well-respected experts within information security who have written that information security awareness programs are a waste of time and effort. The human mind learns boring material readily when presented in the rule of three formats, and frankly, much of the material that the reader will need to teach is boring.