We call it security *awareness* training, but all we ever give our employees is regurgitated knowledge. Their passwords suck, public wifi is bad, and email is deceiving. Mix in some yearly reviews of policies and procedures and you have the perfect recipe for an employee who stopped listening hours ago. You don't truly learn something until you understand "**why**" and that comes when employees are engaged and motivated. This is my take on how to engage through gaming and why it works

Back to BSides Columbus Ohio 2016 video list