Keeping employees committed to information security is tough. The fundamental problem is that the better our security, the less evidence we have to reinforce it. As weeks and months go by with no ...

Time and again, whenever a company is breached, people say: "They were phished. Did they do awareness training? They did? Well, somebody still clicked, so that obviously failed." Then they continue: ...

Imagine this: As part of an exercise to teach security awareness, employees enter a room. An actual, physical operational security "escape room," which at first looks like a regular office room. But ...