Book Image

Transformational Security Awareness

By : Perry Carpenter
Book Image

Transformational Security Awareness

By: Perry Carpenter

Overview of this book

When all other processes, controls, and technologies fail, humans are your last line of defense. But, how can you prepare them? Transformational Security Awareness empowers security leaders with the information and resources they need to assemble and deliver effective world-class security awareness programs that drive secure behaviors and culture change. If your organization is stuck in a security awareness rut and is using the same ineffective strategies, materials, and information that might check a compliance box but still leaves your organization wide open to phishing, social engineering, and security-related employee mistakes, then you need this book. Author Perry Carpenter weaves together insights and best practices from experts in communication, persuasion, psychology, behavioral economics, organizational culture management, employee engagement, and storytelling to create a multidisciplinary masterpiece that transcends traditional security education and sets you on the path to make a lasting impact in your organization.
Table of Contents (9 chapters)

6
What's in a Modern Security Awareness Leader's Toolbox?

We tend to formulate our problems in such a way as to make it seem that the solutions to those problems demand precisely what we already happen to have at hand. With respect to the conduct of inquiry, and especially in behavioral science, I label this effect “the law of the instrument.” The simplest formulation I know of the law of the instrument runs this way: give a small boy a hammer and it will turn out that everything he encounters needs pounding.

Abraham Kaplan1

Well, here we are. We've spent the last three chapters together walking through multiple disciplines related to how humans think, understand, make decisions, and influence each other in groups. You appreciate that working against human nature is a recipe for failure, and you know that information alone is of little help in forming beliefs, shaping values, or driving desired behaviors.

Now that we have established a base-level understanding...