About this session
Most organisations today mandate cyber security awareness training for all their staff. Reporting to boards tends to focus on compliance-related measures, and numbers to training completion rates and click rates in simulated phishing attacks receive attention. Boards are not aware that these are not meaningful indicators of actual security behaviour, or how well the organisation is prepared against attacks. The talk will propose alternative outcome-oriented measures that boards should consider, and outline specific activities they should undertake to ensure secure behaviour, encourage active participation and build resilience among their employees.
Speakers
Professor Andrew ClarkChairContent Advisor, The SASIG
Professor Angela SasseProfessor of Human-Centred Technology, Sasse Ruhr-Universität Bochum
Have a question on this talk?
Send it to the presenter. The team passes it on and the reply comes to you by email.
