Are you fed up with throwing basic metrics (training completion rates, simulated phishing clicks) at your leadership team and hoping something—anything—sticks?

Spoiler: They’re probably fed up with it, too.

You want to track more advanced measures of success—like security behaviors. But your program doesn’t have the funding, resources, access to analysts, or senior stake-holder buy-in to do more—whether that’s leveling up your program, or simply proving its value.

Take heart. Many security awareness professionals set their sights on better support and funding, only to find themselves swamped in swathes of stats.

Consider this webinar your life raft (a really good one, with a built-in snack station and everything).

The exam question:

“Your organization only measures training completion rates, simulated phishing click rates, and security incident report rates. How would you use these metrics to demonstrate genuine business value to senior-stakeholders to secure greater program support and buy-in?”

Ready to unlock the power of data storytelling?

‍

What you'll learn:

• ‍Data storytelling: How to use your existing metrics (like training completion, phishing click rates, security incident report rates) to craft powerful, persuasive narratives.‍
• Senior buy-in: Ways to transform basic metrics into a watertight argument for greater program support.‍
• Proving value: How to demonstrate tangible business value of a robust, human-centric program by converting “security operational metrics” into “business outcome metrics”.‍
• Maturing your program: How this all feeds into maturing your SA&T program through the SANS Security Awareness Maturity Model™ (and the benefits of doing so).

‍

Who’s it for?

• Security awareness professionals
• CISOs, CIOs, and data protection officers
• CTOs, IT Directors, and IT Managers
• Information security officers, managers, and analysts
• Anyone passionate about staying ahead of the curve and transforming the way security awareness is approached

‍

Our speakers:

Oz Alashe MBE

Chief Executive Officer, CybSafe

Oz leads CybSafe. He has been the driving force behind CybSafe – the concept, vision and platform.

A former UK Special Forces Lieutenant Colonel, Oz is focused on making society more secure by helping organisations address the human aspect of cyber security.

Oz has a deep background in the areas of intelligence insight, complex human networks, and human cyber risk & resilience. He’s also passionate about reducing societal threats to stability and security by making the most of opportunities presented through advancements in technology.

Oz was made an MBE in 2010 for his personal leadership in the most complex of conflict environments.

Oz chairs the UK Government’s (DCMS) Cyber Resilience Expert Advisory Group. He also sits on the Advisory Board for the Research Institute in Sociotechnical Cyber Security (RISCS). And he’s an Expert Fellow at The Security, Privacy, Identity and Trust Engagement NetworkPlus (SPRITE+), as well as the Royal United Services Institute (RUSI).

‍

Ira Winkler

CISO and Vice President, CYE and author of Security Awareness for Dummies

The research suggests cybersecurity teams are becoming enablers rather than obstacles of daily business processes. Given that 38% of respondents felt that the security team hampered their work suggests that users still perceive cybersecurity as a nuisance.

This does make it a pleasant surprise that users who reported were overwhelmingly satisfied with the response from the cybersecurity team. The implication is that cybersecurity teams are becoming more customer service focused and understanding of the needs of users.

While cybersecurity friction does have a bad connotation, the reality is that it can be useful and necessary. While you don't necessarily want to make business processes difficult, you do want to make sure that it is not easy to do the wrong things. At the same time, users and the company as a whole should understand that cybersecurity embedded in business practices enables organizations to do things they otherwise would not be able to do. For example, cloud based applications would not be possible unless data could be secured across the internet and users could authenticate themselves properly.

‍

Ava Woods-Fleegal

Global Security Awareness Lead, RTX Corporation

Ava Woods-Fleegal is the Global Security Awareness Leader for Raytheon Technologies, and also currently serves on a security awareness and culture advisory board.

Ava is passionate about helping others understand their current state, desired future state, and how to shift and sustain necessary behavior change for continued success. She is also dedicated to driving adoption of human risk management.