Instructional design for security awareness: how to write an observable target behaviour, choose the format that trains it and decide upfront how to measure it.
Instructional design for security awareness: how to write an observable target behaviour, choose the format that trains it and decide upfront how to measure it.
Security awareness content doesn’t warn you when it ages. Which signs show it has stopped working and how to decide whether to update, replace or retire it.
Learn how to write a security nudge: which mechanism to choose, how to adapt the text to each channel and what a security message should never say.
Awareness plans are usually split by department, the criterion that ages worst. Which criteria hold up a plan by audience, and how to build the calendar.
Your own incident is the strongest awareness material an organization has. What to tell, what to strip from the account and when to tell it.
The security induction lands on the same day as the contract and the accounts. What to keep on day one and what does more spread across the first month.
The clues for spotting a scam expire with the technology that produced them. STEEL://CODE is a cybersecurity manga built on the attack technique.
Once an awareness program turns two, novelty stops doing the work. Which formats to rotate, what to leave alone and how to plan the year.