User awareness is a part of most Information Security programs either out of good sense or regulatory requirement. Researchers have surveyed the administrators of these training programs and have gotten mixed results. This presentation will challenge the status quo of web based training to the lowest common denominator with concepts of risk based user awareness and training incentives. Attendees will be challenged to transform their security program from the office of ?no? to the office of ?know?. What Attendees Will Learn in This Session. Review the latest research in security awareness training results. Why current security training is ineffective as a security control. Alternative solutions such as incentives and risk based security training

Bio: Arlie Hartman is an information security veteran with over 10 years experience. After serving in the Marine Corps, he has worked in healthcare, chemical manufacturing, and consulting. Arlie has conducted compliance and privacy assessments, managed incident response, and led enterprise security projects. Arlie holds the ISC2 CISSP, HCISPP, and GIAC GSEC certifications. Arlie is a member of local chapter ISSA, ISC2 and other information security groups. Arlie is very passionate about developing peoples' interest in and understanding of information security through writing, speaking, and serving as a SANS mentor. He enjoys Freemasonry, craft beer, and tinkering with technology in his spare time.

Back to Circle City Con 2015 Videos list