Transformational Security Awareness

Expert guidance on the art and science of driving secure behaviours

Transformational Security Awareness empowers security leaders with the information and resources they need to assemble and deliver effective world-class security awareness programmes that drive secure behaviours and culture change.

When all other processes, controls, and technologies fail, humans are your last line of defence. But, how can you prepare them? Frustrated with ineffective training paradigms, most security leaders know that there must be a better way. A way that engages users, shapes behaviours, and fosters an organisational culture that encourages and reinforces security-related values. The good news is that there is hope. That’s what Transformational Security Awareness is all about.

Author Perry Carpenter weaves together insights and best practices from experts in communication, persuasion, psychology, behavioural economics, organisational culture management, employee engagement, and storytelling to create a multidisciplinary masterpiece that transcends traditional security education and sets you on the path to make a lasting impact in your organisation.

• Find out what you need to know about marketing, communication, behaviour science, and culture management
• Overcome the knowledge-intention-behaviour gap
• Optimise your programme to work with the realities of human nature
• Use simulations, games, surveys, and leverage new trends like escape rooms to teach security awareness
• Put effective training together into a well-crafted campaign with ambassadors
• Understand the keys to sustained success and ongoing culture change
• Measure your success and establish continuous improvements

Do you care more about what your employees know or what they do? It's time to transform the way we think about security awareness. If your organisation is stuck in a security awareness rut, using the same ineffective strategies, materials, and information that might check a compliance box but still leaves your organisation wide open to phishing, social engineering, and security-related employee mistakes and oversights, then you NEED this book.