Training

At ISC2, the director of security program management of Duke Health shared recommendations for an effective phishing simulation and security awareness programs that center around positive enforcement.

(ISC)² advocacy directors addressed how the infosec space is facing an image problem — particularly among women and minorities — that’s contributing to the ongoing cyber skills gap.

Security awareness education and training can go a long way to keeping companies safe from ransomware attacks.

What training and awareness efforts are needed to persuade more companies to pivot to physical keys and tokens for 2FA?

Wargames allow trainees to build muscle memory in fending off attacks and practice anticipating how attackers may respond. The environment is fun but the lessons are immediately applicable.

Here are eight tips for improving results for cyber training.

“Partnering with ambassadors allows us to tailor content for regions and cultures, as well as threat trends targeting specific job functions or locations,” said the head of security awareness at Equinix. “To keep ambassadors engaged and motivated, I developed recognition and certification plans that give them visibility at the corporate level for all their efforts, and provide certificates they can put on their resumes for external recognition.”