Every day, security professionals encounter a common problem: after bringing a student or colleague up to speed on security basics, it feels like nothing stuck. Why does this happen? And how can we change up the ways we educate security to encourage better outcomes for the average user? This talk will help IT and security professionals find common ground with non-technical users. In addition to sharing people-friendly metaphors, it will give attendees a solid set of communication strategies and approaches to educate the average user about the mindset behind security to develop secure behaviors. And yes–spoiler alert–there will definitely be some Lord of the Rings involved!