Security awareness 2.0: The paradigm shift from training and simulations to engagement and culture

Wednesday
 
27
 
November
2:20 pm
 - 
3:00 pm

Speakers

Jacqueline Jayne

Jacqueline Jayne

The Independent Cybersecurity Expert
Jacqueline Jayne

Synopsis

Let’s begin with what is a Paradigm.

A paradigm provides basic assumptions, key concepts, and methodology that guide best practices within a particular discipline. It is also a basic framework of assumptions, principles, and methods from which the members of a community work.

What is a Paradigm Shift

A fundamental change in approach or underlying assumptions of an existing paradigm. It’s a major change in how people think and get things done that upends and replaces a prior paradigm that can forever change the way we do something, make something or approach something.

How a Paradigm Shift Occurs

Paradigm shifts happen by drops of questioning the way something is done resulting in a flood of confusion or changes.

A paradigm shift can also result after the accumulation of evidence that challenges the status quo where the old way of doing something no longer serves the original need.

“A paradigm shift occurs when old ways of thinking are no longer effective or useful, and new ways of thinking are necessary for progress.” – Ken Robinson

A couple of examples of paradigm shifts are:

Posting letters to email, landline phones to mobile phones, shopping at local physical locations to global online shopping etc. Then we have the disruptors who also represent a major paradigm shift such as Apple, Amazon Netflix and Tesla.

Let’s consider Security Awareness Training (SAT) and its evolution. SAT began as a response to the need to provide training and awareness for employees regarding cybersecurity and the red flags to be on the lookout for. As the sophistication of phishing emails increased, the need to include simulated phishing was added to complement the training.

In 2017, 70% of cyber incidents were the result of human error, and this has steadily increased to 90% in 2023 despite an increase in organisations rolling out SAT of various models and frameworks.

With the human error crisis at a critical point, the next step in SAT evolution was the identified need to work towards creating a Security Culture that has been introduced as the desired outcome and accepted as best practice. Those who have embraced the shift have successfully created and are nurturing a security culture while simultaneously reducing human risk factors.

However, this has challenged the skills, knowledge and experience of IT Professionals resulting in the beginning of a fundamental paradigm shift. Those who understand it will begin to decrease that 90% human error and those who believe that ‘we have always done it this way’ will be left behind.

Join JJ for this session, where she will share the fundamental steps you need to take to move into this paradigm shift from training and simulations to engagement and culture. 

Acknowledgement of Country

We acknowledge the traditional owners and custodians of country throughout Australia and acknowledge their continuing connection to land, waters and community. We pay our respects to the people, the cultures and the elders past, present and emerging.

Acknowledgement of Country