Attention Before Awareness

The ignition point Attention. That’s the game. That’s the god(dess). And until we start worshipping it, every awareness campaign that we build will collapse under its own dullness. Cyber awareness isn’t failing because employees are careless, stupid, or “the weakest link”. It’s failing because we’re not competing for their attention. Not even trying, half the…

Read More

Two Tribes, One Fire

A long simmering tension exists between Security Awareness and Business Resilience. When the two finally work as one, prevention strengthens recovery and recovery strengthens behaviour. This is where modern cyber culture grows up.  Behaviour ● Culture ● Human Risk If you’ve ever sat in a meeting where Security Awareness and Business Resilience glare at each…

Read More

Don’t teach me anything.

John Oliver was joking when he barked that line at Edward Snowden. Yet it might as well be every employee staring down another mandatory cyber module. Beneath the comedy is a truth most organisations refuse to face. People do not reject cyber security because they are stupid. They reject it because the learning experience reeks…

Read More