At some point in our careers, we've been subjected to user awareness training. Most of us have even taken part in buying or developing the training for our organizations. And despite our best intentions, it always ends up being the same information delivered the same way and has the same level of impact on our security posture (little to none). In this talk, we will discuss the current state of user awareness training and how we can improve upon what we are already doing. We will give examples of how our customers (with names removed to protect the innocent) do user awareness to varying degrees of success. We will also discuss how we as an industry can do better by providing information that you can take back with you to build a successful user awareness program that works in tandem with your pre-existing information security program and policies.

Magen Wu is a Senior Security Consultant with Rapid7 with almost 10 years of experience in the technology industry. Magen is currently pursuing her master's in Organizational Psychology with the intent to apply its principles to security practices and training. She also volunteers for DEF CON and BSidesLV. Her twitter handle is @Tottenkoph.

Back to Circle City Con 2017 Videos list