harnessing the human side of security
The impact of mobile malware on the enterprise is rising; while immediate action may not be warranted, there are some actions to take today to prepare for the future with less friction. Security Catalyst notes in terms of security awareness, security leadership, effectively communicating the value of security and a few thoughts on how a paper like this advances a security career
My turning point not only brought my family closer together and put us on the path of a more simple life, it also helped me uncover and voice my true passion: the “human side†of security. On February 18, 2010, it was clear that my focus was blending my background in human ecology, information security and professional communication to focus on security awareness, effectively communicating the value of security and helping people advance their security careers.
What can grocery-shopping carts teach us about building security awareness that works to influence behavior change? Turns out perhaps more than imagined. During a recent hotel stay, I took a trip to a local grocery store to buy some snacks. I pulled into the lot, parked and headed to the store. Since I only needed [...]
Your paradigm is so intrinsic to your mental process that you are hardly aware of its existence, until you try to communicate with someone with a different paradigm. ~ Donella Meadows Considering the meaning, purpose and expression of security awareness is a personal and professional pursuit. In fact, it’s my sole focus and the reason [...]
Do not put your faith in what statistics say until you have carefully considered what they do not say. ~William W. Watt Over the last few years, we have been presented a series of reports, complete with statistics, suggesting the cause of security breaches is people. Whether external attackers taking advantage of individuals, insider mistakes [...]
The moment we judge someone, we forfeit the ability to help. Seems like a lot of what is being promulgated in so-called “security awareness†today is nothing short of berating people with a list of the things they shouldn’t do, coupled with a non-intuitive list of what they should do. I read a lot of [...]
by Dennis Kuntz “This isn’t just a legal compliance issue for us. We consider the privacy issue to be an opportunity to reinforce our brand image.†– Tom Warga, SVP and General Auditor, New York Life Insurance Co. Early in my career I accepted a job rich with challenges and opportunities. It was for a [...]
Welcome to the audio series of Into the Breach: Protect Your Business by Managing People, Information and Risk (click this link to learn more about this book and pick up a complete copy – to get started on your personal journey). This series, underwritten by Configuresoft, now part of EMC, is the full and unabridged [...]
Podcast: Play in new window | Download (8.4MB)
By Julie Fugett So much of what we do in information security is immediately measurable: how many packets did the firewall drop? How many security incidents did we handle this week? Elsewhere, however, our reach can be more difficult to measure. How effective is our awareness program? Are we talking about the right topics to [...]
Michael Santarcangelo is the catalyst* called upon to deliver successful results when others have struggled and failed to harness the human side of security. Blending a degree in human ecology with … [Read More...]
Effective communication of security ensures that whether written, spoken or blended across delivery options efforts are positioned to reduce friction, bring technology and business objectives into alignment and inspire those we serve to … [Read More...]
Engage with Michael Santarcangelo