Loading ...
SANS ranks human error at the top of information security worries.
Robert McMillan reports an interesting case of military cadets who fell for an email social engineering attack soon after they were trained in information security.
Papers such as Why Phishing Works seem to suggest that there is not much that can be done in the way of educating users.
The interesting question posed: “What is the line between what can and cannot be reasonably taught that would satisfactorily alter human computing behavior for the better?”
It is a question to which I do not have a satisfactory answer at the moment.
One Trackback
[...] Make them aware. Conveniently remind them of potential issues and the proper course of action, but don’t expect them to have or gain any real working knowledge of information security. Bookmark to: [...]