Transforming security behaviors from have to to want to through behavioral science. Co-founder of @hello_Elevate
San Francisco
Joined October 2010
- Tweets372
- Following223
- Followers1.9K
- Likes183
Studies and industry reports consistently show that unintentional insiders cause the most incidents. 2 out of 3 insider threat incidents originate from the unintentional insider.
This Post is from an account that no longer exists. Learn more
If you take the time to trace the kill chain all the way back, you will find that users unintentionally cause 85% of security incidents. And it turns out that it’s only 6% of your workforce causing the vast majority of these incidents.
This Post is from an account that no longer exists. Learn more
We don't empower our employees to fight phishing based on how attackers actually attack. What if we used real-world data to inform our proactive security? Tomorrow's webinar will bust myths about what works and what doesn't to prevent incidents. @hello_Elevate
Is security training effective at reducing phishing clicks? Yes until it's counterproductive.
@hello_Elevate
🌐 Elevate Security is a global company and while the world is opening up for some of us, not all are able to travel. I asked my team to compile a list of fun virtual activities we could do together to have fun and stay connected. The list w/ links: docs.google.com/spreadsheets…
Security teams spend a lot of emotional capital with employees testing them with simulation phishes in hopes that by tricking them we build our resilience to actual attacks. But do these tests actually work to reduce our human risk?
The answer- Yes but to a point.
Here is a quick writeup about our research and findings: elevatesecurity.com/do-phish…
Masha Sedova retweeted
This may be my PowerPoint magnum opus, as seen live just now by attendees of @hello_Elevate's event today.
#BringClippyBack
ALT This slide is truly a monstrosity. The text reads, "Should I shame you for not wanting to read this slide and blame you for human error?" in a mixture of Comic Sans and Papyrus and shades of cyan and neon green. The background is lemon yellow, layered with "art" including a herd of Clippy's, a cat using a computer with a cat coming out of the monitor, a dripping wall of cybery slime, a retrowave sun, a melting Paint color picker, and a glitchy block of text saying "Game Over."
Humans make (security) mistakes. It's inevitable. We can't keep trying to train people out of it. If we do, ransomware, account takeover, & data loss will continue to run rampant.
It's time for a new way of defending the Human Attack Surface.
hopin.com/events/human-attac…
Love the boldness of the vision the GCCC has outlined for the security community.
"What can we accomplish if we remove the boundaries and barriers that exist – to view the world as one enterprise – with the goal of solving far-reaching challenges in cybersecurity together."
The launch is happening tomorrow! Hop in and buckle up. eventbrite.com/e/net-measure…
I don't always do fireside chats, but when I do....it is with the most impressive Tony Spinelli. Join us, I promise it'll be entertaining and enlightening! hubs.li/H0F-zzZ0
ALT Lessons from a fortune 100 ciso
Pressure to balance productivity with #security with expanded remote workers & complex environments? Join me and @RichardSeiersen to learn about #cybersecurity frameworks you can apply to best deal with today’s risk without slowing your employees down. elevatesecurity.com/learning…
Coming up!
So thrilled to have my friend, former colleague and people-security expert @modMasha co-founder of @hello_Elevate presenting "Mind Games: Using Data to Solve for the Human Element" at the @isacaatlantic Virtual InfoSec event on Nov 2-3. Register at isacaconference.ca
What is a Human risk officer and why do you need one?
Employee risk keeps being the soft underbelly of security thwarting even the best advances in technology, but it doesn't have to be. @lspitzner and I put our heads together on this blog to share how: sans.org/security-awareness-…
Thinking about diversifying your advisory board or board of directors? Here are some great places to start looking for some exceptionally talented folks:
BoardList: lnkd.in/gvJD7Un
Women in Revenue: lnkd.in/gEEUGj5
Athena Alliance: lnkd.in/g8kiR7J
Masha Sedova retweeted
I don’t remember if I’ve shared this already but it’s so bad ass I’m doing it again either way.
You’re unable to view this Post because this account owner limits who can view their Posts. Learn more