Security Through Education

A free learning resource from Social-Engineer, Inc

Home

by • 3 Comments

Special Edition March 2013 – Employee Security: Should we Educate or Ignore

We don’t do it often… but when a topic so fitting comes up we just get together and chat about it.  Yesterday a well known author wrote an article that stated basically “security gets in the way of having fun on the Internet”.  This topic is close to us as we all focus on education and security. Enjoy the chat… March 20, 2013

 

Download

Special Edition March 2013 – Should we even bother educating our employees? March 20, 2013

Podcast Notes

This is a special edition of the Social-Engineer.Org Podcast.  Why?  We read this blog post from Bruce Schneier and decided we just couldn’t stay quiet.  He claims that educating through security awareness programs is a waste of time and money and that (quote) “I personally believe that training users in security is generally a waste of time and that the money can be spent better elsewhere” as well as “computer security is an abstract benefit that gets in the way of enjoying the Internet.”
So at the risk of ruining the fun Internet for our employees and clients we decided to have a little chat about this topic and discuss security education from the trenches….
We invited special guest Ben0xA on to talk with us about this very important topic and his blog post
And if you want to, you can read Bruce’s blog mess here:  http://www.darkreading.com/blog/240151108/on-security-awareness-training.html 
enjoy

Got a great idea for an upcoming podcast? Send an email to contribute [email protected] social-engineer.org

Check out Spy Associates for some awesome social engineering gear.

Want daily security news? Join the great guys (except for JadedSecurity) at the ISD Podcast (ISD Podcast discontinued February 2013).

And check out a schedule for all our training at Social-Engineer, LLC.

Download View in iTunes

Comments

  1. Nate says

    This is an extremely good and informational podcast, especially for being a special edition. I shared it with my entire team. It opened my eyes on users not coming to us with problems because they think we act like they are stupid. Most of the time, I do anything I can to give someone credit for not being stupid, but what about those times, which are prevalent around here, where they repeatedly prove that they just don’t care? IT here will gladly help and gladly educate, but any training we try to provide is completely ignored. Sometimes, I think the only solution to my sanity is to find a way out of here and do something more security focused anyway.

Trackbacks

Leave A Reply

This site uses Akismet to reduce spam. Learn how your comment data is processed.