More than 80% of security awareness professionals have highly technical backgrounds. That's great—they understand the problem—but that's bad because they're really bad at communicating the solution.
Lance Spitzner, Director SANS Security Awareness1
Have you ever watched someone trying to communicate with a person who doesn't speak the same language, but they hope that talking louder and slower2 will somehow magically help? Yeah—Security awareness communications can feel like that.
We expect a lot of our employees when it comes to making secure decisions, protecting customer and organizational information, and behaving in a secure manner. Doing all of this can require a pretty complex collection of steps; and, while humans are generally pretty good at performing complex tasks that they've practiced and care about, they are not near as good at consistently performing complex...