Pwning the Hapless: How to Make Your Security Program Not Suck

Explore effective strategies for enhancing organizational security in this 25-minute conference talk from BSidesLV 2014. Delve into the presenters' experiences and insights on data protection, debunking security awareness myths, and creating impactful security programs. Learn techniques for customizing and implementing annual training, addressing social engineering threats, and improving communication within your organization. Discover practical approaches to make security awareness matter and overcome common challenges in developing a robust security culture.

Introduction
Example
My experience
Data is our business
Security awareness myths
How to get people to click a link
Create a program
Make it matter
Customization
Annual Training
Brad Bird
Bill Gates
No bulletproof solution
Security awareness
What can we do
Social engineering
Communication
Thank you