A Logo

Feel free to include my content in your page via my
RSS feed

Help Irongeek.com pay for
bandwidth and research equipment:

Subscribestar or Patreon

Search Irongeek.com:

Irongeek Button
Social-engineer-training Button

Help Irongeek.com pay for bandwidth and research equipment:


Carrot vs. Stick: Motivation, Metrics, and Awareness - Magen Wu (Circle City Con 2018 Videos) (Hacking Illustrated Series InfoSec Tutorial Videos)

Carrot vs. Stick: Motivation, Metrics, and Awareness
Magen Wu

Circle City Con 2018

User awareness training is often viewed as a necessary evil-one more thing we must do in order to check the box. We either outsource our training to a third party, never paying attention to it again until we need to review our subscription, or we run it internally and spend as little time on it as possible. As a result, our users are no better prepared for security threats and they are not learning while seeing it as an annoyance or obstruction, and not a learning experience. This talk aims to change this and starts by discussing possible metrics that can be used to gauge the effectiveness of the program and level of engagement and impact on users and other departments your organization's user awareness program has. Once we talk about how to track the impact of your program, we will move on to how habit formation and key concepts in motivation can positively influence your users' security habits and the success of your program.

Magen Wu has over 10 years of specialized IT experience and has consulted with organizations in multiple industries including: state and local government, education, retail, technology, and healthcare. Magen received her Bachelor's degree in IT Management, with a focus on Information Security and is currently enrolled with Southern New Hampshire University, earning a Master's degree in Industrial and Organizational Psychology. Outside of work, Magen spends her time as the senior lead for DEF CON workshops and presenting at several conferences a year.

Back to Circle City Con 2018 Videos list

Printable version of this article

15 most recent posts on Irongeek.com:

If you would like to republish one of the articles from this site on your webpage or print journal please contact IronGeek.

Copyright 2020, IronGeek
Louisville / Kentuckiana Information Security Enthusiast