Security Awareness Training Should Motivate Employees, Not Scare Them
Summary
The article argues that fear-based security training can discourage employee engagement and recommends positive, interactive learning and incentives to build security awareness and a stronger security culture.
Key points
- The article says fear, uncertainty, and doubt tactics may prompt short-term reactions but can contribute to resentment, anxiety, and defiance.
- It argues phishing simulations should teach employees in a safe environment rather than punish them for mistakes.
- The article cautions that relying on phishing-test results alone can prioritize avoiding trouble over developing employees’ security judgment.
- Suggested alternatives include storytelling, interactive learning, gamified simulations, quizzes, and employee feedback.
- It recommends recognizing and rewarding positive participation and performance instead of focusing only on penalties.
- The article presents trust, engagement, and a stronger security culture as expected benefits of a more positive approach.
Article Details
- Topic
- The article argues that positive, engaging security awareness training is more effective than fear-based (FUD) approaches.