Easy Prey28 Sep 2022

4 Levels of Human Factor Security with Roy Zur

Many believe that cybersecurity is for high tech professionals only. It's important to know that employees at every level can accidentally open the door to your network. Today's guest is Roy Zur. Roy is the founder and CEO of Thrive DX for Enterprise which is a global education company committed to transforming lives through digital skills training and solutions as well as addressing the human factor of cybersecurity training. Roy is a 15 year veteran of the Israeli Defense Force where he served as a major. Roy also serves as the adjunct professor in Risk Management and Cybersecurity. He is the founder and chairman of the non-profit Israeli Institute for Policy and Legislation and a member of the Forbes Business Council.

Show Notes:

[1:05] - Roy shares his background in cybersecurity and the different responsibilities he's had.
[2:27] - Roy describes the challenges experienced in the Israeli Defense Force.
[3:55] - It's not just about the training, it's also about the screening.
[6:30] - The rapid changes in cyber security makes maintaining the curriculum a challenge.
[9:13] - When finding people that qualify as candidates for this learning, there is a lot to learn. Roy describes parts of the program.
[11:47] - Many people are afraid of cyber security because it seems so complicated, but it is more of a human factor issue.
[13:08] - There are different groups within an organization that have access to data.
[14:34] - Roy defines the groups or levels of an organization.
[16:11] - Software developers and engineers have a huge responsibility.
[17:08] - Each group has to have an education about security and the type of skills they need will vary.
[18:47] - The method of learning is also different per level.
[20:21] - Giving employees the information they need and nothing more is crucial so they can spend their time working on their responsibilities.
[22:12] - Training for awareness which usually includes everyone in an organization takes about 2 hours a year but people don't always take it seriously.
[24:11] - Phishing simulations are very effective. Roy describes the most effective methods of training.
[26:15] - Full bootcamps can be up to 500 or more hours.
[27:25] - In Education, Bloom's Taxonomy plays a big role.
[29:11] - When you create new knowledge, you've completed the full cycle of truly learning something.
[30:58] - For most people, the motivation to complete cybersecurity training is simply for compliance.
[33:12] - These trainings have to be tied into the human factor of cybersecurity.
[36:36] - Small businesses are actually at more risk of being impacted more greatly by a data breach.
[39:10] - On Thrive DX's website, there are a lot of great resources available.

Thanks for joining us on Easy Prey. Be sure to subscribe to our podcast on iTunes and leave a nice review.

Links and Resources:

Denne episoden er hentet fra en åpen RSS-feed og er ikke publisert av Podme. Den kan derfor inneholde annonser.

Episoder(329)

Job Recruiter Scams

Job hunting is hard enough without having to stop and ask whether the recruiter in your inbox is even real. My guest today, Jay Jones, ran into that problem firsthand after being laid off in December ...

24 Jun 35min

Bail Bonds Scams

Getting a call that someone you love has been arrested is scary enough. Getting that call from someone who sounds official, knows just enough to seem credible, and says you have to send money right aw...

17 Jun 36min

Confessions of a Fraudster

Technology keeps changing, but many of the most effective scams still come down to something very human: trust. My guest today is Tony Sales, co-founder of We Fight Fincrime and Underworld TV. Tony ha...

10 Jun 54min

Personal Safety

Scams and safety threats don't always announce themselves. Sometimes they start quietly, with a moment of distraction, a strange feeling you ignore, or a situation that shifts just enough to test whet...

3 Jun 43min

Data For Sale

Everyday conveniences ask for tiny pieces of information all the time like a phone number at checkout, a zip code at the register, an email address for a receipt, or a loyalty account for a small disc...

27 Mai 43min

Exploiting Psychology

Scams are often explained as a failure of judgment, but the truth is far more human. People are not fooled because they are foolish. They are manipulated at the exact moment emotion overrides logic, w...

20 Mai 45min

Investment Traps

Investment losses can be confusing because they do not always tell the whole story. Sometimes money is lost because the market has changed. Other times, an investor was sold something they did not und...

13 Mai 47min

Elder Exploitation

Aging parents often rely on the people closest to them for help, but what happens when that help becomes a way to take control? For Charles Wallace, the warning signs started small. His mother's fridg...

6 Mai 39min