What's in a Modern Security Awareness Leader's Toolbox?
Perry Carpenter · 2019
This chapter helps to immunize security leaders' security awareness program from the all-too-common disease of being a one-trick pony that can easily feel stale, repetitive, tired, and irrelevant. The cure for Kaplan's “law of the instrument” is to expand the number of instruments that they have readily available and front of mind. Messaging and communication will always play a critical part in a security awareness program. The problem is that most organizations fall into the trap of believing that flinging a video or learning module at their employee-base is the way to “do” security awareness. It is important to understand how people naturally think, behave, express preferences, make choices, and adopt new beliefs if he/she ever wants to be effective in shaping their security-related thoughts and actions. Experiences and events are segments of time in which a learner is more actively engaging in an element of security leaders' program.