Building Security Awareness Through Social Engineering

Explore the fundamentals of building an effective security awareness program through social engineering techniques in this 45-minute conference talk from Central Ohio Infosec 2015. Delve into the core components of awareness programs, their effectiveness, and strategies to counter social engineering threats. Examine the role of security professionals in addressing these challenges and discover the "secret sauce" for successful implementation. Learn about crucial topics to cover, audience analysis techniques, and the three types of communication styles. Gain insights on patching human vulnerabilities, creating engaging awareness websites, and moving beyond traditional PowerPoint presentations. Investigate the application of Neuro-Linguistic Programming (NLP) and NLP anchors in enhancing security awareness initiatives.

Intro
Introductions
What Is An Awareness Program?
Why does it work?
How Can We Stop It?
Are we part of the problem? I DO NOT ALWAYS BLAME SOMEONE
The Secret Sauce
What are we defending against?
What should topics should we cover?
Understand your audience
3 Types of Communication Styles
Patch your people
Create an awareness website
Presentation is everything
Moving beyond PowerPoint
Neuro-Linguistic Programming (NLP)
NLP Anchors