In this episode of the Secure and Simple Podcast, host Dejan Kosutic (CEO at Advisera) interviews Craig Taylor, CEO and co-founder of CyberHoots, about best practices and myths in cybersecurity awareness training. Taylor argues the industry’s biggest mistake is relying on punishment, shame, and deception-based phishing tests, saying psychology supports positive reinforcement and rewards to increase desired behaviors. He recommends teaching a clear phishing rubric, practicing in a browser-based environment rather than trick emails, using gamification such as levels and leaderboards, and fostering a safe culture where employees report mistakes quickly. The discussion covers short, frequent training content, useful KPIs like compliance and reporting, cautions about incentives, examples of real incidents, and how AI may increase breaches before security improves while human social engineering remains a key risk.
Podden och tillhörande omslagsbild på den här sidan tillhör
Dejan Kosutic. Innehållet i podden är skapat av Dejan Kosutic och inte av,
eller tillsammans med, Poddtoppen.
