E21 - Fighting Security Monsters Through Psychology

In this episode, Brian and Milou engage in a thought-provoking conversation with Zach Eikenberry about the psychology behind security training. They explore how to make security training more engaging and effective by understanding human behavior, the role of gamification, and the importance of tailoring training programs to meet the needs of employees. The discussion also touches on the challenges of compliance, the impact of technology on security awareness, and the future of privacy in an increasingly open digital world. Zach emphasizes the need to socialize security within organizations to foster a culture of awareness and proactive behavior against cyber threats. Socialize with Zach on LinkedIn: https://www.linkedin.com/in/zbey/ 00:00 Introduction 03:52 Using Psychology in Security Training 08:16 Gamification Isn't Necessarily Engaging 12:59 The Mixed Results of Team-based Training 16:40 Psychology Use in the MGM Breach 17:59 AI In Social Engineering 22:54 The Importance of Socializing Security 29:03 Designing a Training Program to Engage Learners 33:51 The Parting Question: Privacy vs. Security 39:04 Engaging Insights on Security Training 43:20 Conclusion