1. The Path to Security - Preventing User Negligence Sarah Kennedy

2. Overview  How Students are Taught  How InfoSec Professionals Teach  Why Awareness is Important  Goals  Tools to use

3. How Students are Taught

4. How InfoSec Professionals Teach

5. Let someone else handle it….

6. Why Awareness is Important  Symantec Study states: employee negligence and system glitches account for 64% of data breaches  62% of employees think it’s acceptable to transfer corporate data outside of the company on personal devices and cloud services  Employee negligence breaches are increasing with every study performed

7. Training Goals  Make it personal  Train for behavior changes  Catchy  Marketing style awareness  Reinforcement and Repetition  Make it fun!

8. This is an Ultimate Repeatable Goal!

9. Adam Grant - Organizational Psychologist “Wash your hands to protect yourself” “Wash your hands to protect your patients” “Practice information security to protect our customers” “Use information security to protect your family”

10. Negative vs Positive  “Don’t or you will be reprimanded with consequences up to termination of employment.“  Don’t let someone tailgate behind you to enter the building.  Make sure you to help prevent data breaches.  Do be mindful of people attempting to follow you into the building.

11. Analogies

13. Games!

14. Practicing Preventative Scenarios

15. Lock Your Computer Tag

16. Main Goals for InfoSec Professionals  Information Security is everyone’s job requirement,  Not just IT’s.  To protect the customers,  It’s what we expect when we are the customer.  Remember: It’s Possible!

18. Questions?