Instructional design for security awareness: how to write an observable target behaviour, choose the format that trains it and decide upfront how to measure it.
Instructional design for security awareness: how to write an observable target behaviour, choose the format that trains it and decide upfront how to measure it.
Learn how to write a security nudge: which mechanism to choose, how to adapt the text to each channel and what a security message should never say.
Awareness plans are usually split by department, the criterion that ages worst. Which criteria hold up a plan by audience, and how to build the calendar.
Your own incident is the strongest awareness material an organization has. What to tell, what to strip from the account and when to tell it.
Self-efficacy predicts secure behavior better than knowledge does, and no awareness dashboard tracks it. What the evidence says and what a program can decide.
The security induction lands on the same day as the contract and the accounts. What to keep on day one and what does more spread across the first month.
Once an awareness program turns two, novelty stops doing the work. Which formats to rotate, what to leave alone and how to plan the year.
A phishing reporting habit that gets no answer fades on its own. How to design the consequence of a report so that the circuit finally closes.