Over the last few years the discussion around security culture has come to the fore and having worked in and around this area for a while I welcome it; particularly when, one of the simplest ways to reduce risk to organisations is to have a security conscious workforce. However, it is not as simple as […]

What makes an information security awareness programme effective? As in most cases the answer is “it depends”. Let me elaborate; if your goal is simply to obtain that magic compliance tick then maybe you’ll use some form of computer based training (CBT) coupled with some quizzes and possibly a few videos on your intranet page […]

My first article for InformationSecurityBuzz was published in February. I’m planning my next one and will try and get one out every month, hopefully, maybe 😉 Entitled – From Rookie Speaker To Mentor To Track Organiser – My BSides Journey. Check it out here