Keynote: Strengthening the weakest link through Context-Based Micro Training

No ratings

Presented at SecurityForum2018 2018 by

Marcus Nohlberg

We call them “the weakest link”, the users, and they have increasinglybeen more and more in target. Even though there has been more and moreresearch and training programs developed, it seems that whatever weare doing, has failed. In some areas, up to 90 % of the successfulattacks started with exploiting human weaknesses, through phishing orsocial engineering. The current paradigm seems to have failed us.During the past years, we spent time into researching and developing anovel approach to educating the user about information security. Ourapproach is called Context-Based Micro Training (CBMT). The idea with CBMT is to present users with relevant information in a situationwhere it is needed and in small, accessible, chunks of training. Withthis approach, users are presented with information when it isrelevant and in a manageable format. Further, giving the userinformation when the user is in a situation that can pose a securityrisk also gives the user a wake-up call and a chance to consider hisor her actions. During our testing, we have seen positive results interms of our method being appreciated by the users as well aseffective in influencing the user’s behavior.During this presentation, you will hear about CBMT, what it is, how itworks, and see some successful examples and be given tips and adviceon how to use it in your own organization.