Managing Human Risk and Security Awareness
Security awareness training in Toronto has a poor reputation, mostly because it usually means one annual video. This six week course treats human risk as a programme you design, run and measure like any other control.
You leave with a behaviour change plan, a phishing simulation approach that does not punish people, and human risk reporting your executive team can act on.
- Duration
- 6 weeks
- Format
- Live online, instructor-led
- Prerequisites
- None required
- Class size
- Capped at 12 learners
What you will be able to do
- Identify the specific behaviours that reduce risk in your organization and drop the rest
- Design an intervention using nudges, friction and reinforcement rather than warnings
- Run a phishing simulation programme with a stated objective and defined follow-up
- Report on reporting rate, time to report and repeat behaviour, not click rate alone
- Segment audiences so developers, finance and executives get different content
- Set a defensible baseline and explain what your numbers can and cannot prove
- Build a security champions network that is still alive after six months
- Make the budget case for a human risk programme to a sceptical executive
Course outline
6 modules
- Why annual training changes knowledge but rarely changes behaviour
- Naming the behaviours that actually move your incident numbers
- Building a human risk register alongside the technical one
- Linking human risk to the incidents your organization really has
- Setting realistic goals for the first year of a programme
What you need before you start
- Some responsibility for awareness, training, communications or security culture
- Access to at least one stakeholder group you can design a campaign for
- Willingness to present your programme plan to the class for critique
- Around four hours a week outside sessions for the programme build
Who this course is for
- Security awareness and human risk managers building a real programme
- Security managers who inherited awareness along with everything else
- Communications, learning and human resources staff supporting security
- Consultants advising clients on culture and behaviour change
Questions about this course
More in security leadership and governance
Entry-levelCIS Controls Implementation Group 1
A four week, step-by-step route through the CIS Controls at Implementation Group 1: basic cyber hygiene you can actually complete with a small team.
4 weeks · live online
Contact for pricingView outline
Entry-levelBusiness Finance for Security Leaders
Four weeks of business finance for security leaders: read the statements, build a budget, split capital from operating cost and make the case finance will back.
4 weeks · live online
Contact for pricingView outline
CorePerforming a Cyber Security Risk Assessment
A six week, hands-on method for cyber security risk assessment: scope the work, test controls, score risk defensibly and write findings people act on.
6 weeks · live online
Contact for pricingView outline
Ready to launch your cyber security career?
Join the next live online cohort. No experience required, just bring the curiosity.