Using the Secrets of Behavioral Science to Influence Security

Presented at BSidesSF 2019, March 2, 2019, 9 a.m. (165 minutes)

TO REGISTER FOR THIS WORKSHOP, GO [HERE](https://bsidessf.regfox.com/2019). NOTE THAT SPACE IS VERY LIMITED. Today’s tools that are available to security teams to engage and enable their employees to reduce this risk are simply inadequate and not up to the task. Quarterly or annual one size fits all training with repeated reminders and warnings leave employees feeling uncomfortably numb. By leveraging the latest advances in behavioral science, we can better understand why employees make the decisions they do and how to influence these actions to make employees and organizations more secure. This course will allow participants to define what security culture means for their organization and understand what key behaviors to focus on for maximum impact. We will then look at why humans are terrible at making risky decisions and what security teams can do about it. Finally, we will share the dark arts of behavioral science techniques to help security practitioners influence security behaviors across their organizations. This course is for any security practitioners who care about making humans a key part of defending their organizations.

Presenters:

  • Masha Sedova - Elevate Security
    Masha Sedova is an industry-recognized people-security expert, speaker, and trainer focused on engaging people to be key elements of secure organizations. She is the co-founder of Elevate Security delivering the first people-centric security platform that leverages behavioral-science to transform employees into security superhumans. Before Elevate, Masha Sedova was a security executive at Salesforce where she built and led the security engagement team focused on improving the security mindset of employees, partners, and customers. In addition, Masha has been a member of the Board of Directors for the National Cyber Security Alliance and regular presenter at conferences such as Black-hat, RSA, ISSA, Enigma, and SANS.
  • Robert Fly
    Robert Fly is co-founder and CEO of Elevate Security. Prior to Elevate Security, Robert was an executive advisor for several security startups and built and led security and engineering teams at Salesforce and Microsoft for 17 years. He holds more than a dozen patents in security and was a founding member of the Cloud Security Alliance.
  • Megan Caldwell
    Megan Caldwell is the current Director of Customer Success for Elevate Security. She has spent the last five years working directly with customers to implement, scale and measure behavior change in the health and security fields. Previous to her work in behavior change startups she was the Executive Director of Health for America a fellowship program that designed a entrepreneurship, design thinking, and healthcare curriculum for young professionals. She currently lives in Oakland, CA where she is a heavy user of the public library.

Links:

Similar Presentations: