Engaging Employees in Security Appreciation with Robert Siciliano

Engaging Employees in Security Appreciation with Robert Siciliano

In this episode of "How Many CTOs Does It Take?" podcast, host Brad Hefta-Gaub welcomes Boston-raised security speaker Robert Siciliano, who traces his path into security from early experiences with crime, teaching physical self-defense, and being hacked in the mid-1990s. Robert argues that most corporate security training is compliance-driven "security theater" focused on phishing, creating security fatigue while leaving human behavior unchanged. He advocates "security appreciation," making security personal and using interactive dialogue rather than monologue. He explains the "human blind spot," a biological impulse to trust, plus denial and cultural myths that equate security with paranoia. He urges leaders to live security as a lifestyle, empathizes with the C-suite through relatable family stories, addresses digital literacy gaps, and leverages compelling AI/deepfake risks—illustrated by Brad's deepfake-like fraud example—to drive lasting behavior change.

00:23 Meet Robert Siciliano 01:53 Streets to Security 02:50 First Hack Wakeup 05:32 Why Training Fails 07:24 Compliance Fatigue 07:59 Make It Personal 09:11 Interactive Reality Check 12:34 Fatalism and the Human Blind Spot 15:59 Home Security Parallels 20:17 Security vs Paranoia 25:23 Denial and Avoidance 26:42 Attackers Use Heuristics 28:02 Good People vs Sociopaths 30:22 Strategic Human Firewall 31:48 Awareness Versus Appreciation 33:58 Tone At The Top 36:27 Make It Personal For Leaders 38:40 AI Deepfakes Raise Stakes 44:10 Digital Literacy Crisis 49:59 Empathy And Dialogue Training 54:53 Wrap Up

Resources:

#TechPodcast #EngineeringPodcast #DevTalks #PodcastForDevs #HowManyCTOs #Podcast #CTOs #CTOPodcast #ChiefTechnologyOfficer #Technology #Engineering #SoftwareDevelopment #SoftwareEngineering #TechLeadership #EngineeringLeadership #EngineeringCulture #TechDebates #CyberSecurity #SecurityAwareness #SecurityInnovation #DigitalStrategy #CyberAwareness #CyberRisk #DataProtection #RiskManagement #SecurityCultur #SafetyFirst #SecurityMatters #PrivacyProtection #TheStrategicHumanFirewall #AI #TheHumanBlindspot #Deepfakes #SecurityAppreciation #KitchenTableEffect #DigitalLiteracy

Episoder(64)

From Specs to Monitoring: A CTO's Guide to QA Best Practices

From Specs to Monitoring: A CTO's Guide to QA Best Practices

In this episode of "How Many CTOs Does It Take?" podcast, hosts Scott Porad and Brad Hefta-Gaub tackle the evolving landscape of quality assurance in web apps. They challenge the notion of QA as just ...

7 Okt 202539min

Deploys, Demos, and the Elusive Metric of Engineering Productivity

Deploys, Demos, and the Elusive Metric of Engineering Productivity

In this episode of "How Many CTOs Does It Take?" podcast, hosts Scott Porad and Brad Hefta-Gaub wrestle with one of the industry's toughest questions: How do you measure engineering productivity? The ...

30 Sep 202551min

Product Debt: The Hidden Drag on Innovation

Product Debt: The Hidden Drag on Innovation

In this episode of "How Many CTOs Does It Take?" podcast, hosts Scott Porad and Brad Hefta-Gaub dive into the concept of product debt: what it is, how it differs from technical debt, and why it matter...

23 Sep 202534min

From Streaker Apps to AI Safety Loopholes: What CTOs Need to Know

From Streaker Apps to AI Safety Loopholes: What CTOs Need to Know

In this episode of "How Many CTOs Does It Take?" podcast, hosts Scott Porad and Brad Hefta-Gaub break down the quirky and serious sides of today's AI. They cover vibe coding, smart glasses, debugging ...

16 Sep 202540min

Do Engineering Managers Need to Code? Leveling, Calibration & Craft

Do Engineering Managers Need to Code? Leveling, Calibration & Craft

In this episode of "How Many CTOs Does It Take?" podcast, hosts Scott Porad and Brad Hefta-Gaub delve into the art and science of engineering leveling frameworks. From performance reviews to competenc...

10 Sep 202539min

From Prompts to Product: How AI is Changing Software Development

From Prompts to Product: How AI is Changing Software Development

In this episode of "How Many CTOs Does It Take?" podcast, hosts Scott Porad and Brad Hefta-Gaub explore the evolving reality of AI productivity, and what it means for software engineering, product man...

2 Sep 202535min

From Bugs to Bloat: Product Debt, KPIs, and the Cost of Features

From Bugs to Bloat: Product Debt, KPIs, and the Cost of Features

In this episode of "How Many CTOs Does It Take?" podcast, hosts Scott Porad and Brad Hefta-Gaub dig into the messy reality of product management effectiveness, and what happens when bugs reveal deeper...

26 Aug 202528min

CTO Therapy: Managing Urgency, Expectations, and Trust

CTO Therapy: Managing Urgency, Expectations, and Trust

In this episode of "How Many CTOs Does It Take?" podcast, hosts Scott Porad and Brad Hefta-Gaub delve into the critical issue of building a sense of urgency and trust within engineering teams. They di...

19 Aug 202556min

Populært innen Business og økonomi

stopp-verden
dine-penger-pengeradet
lydartikler-fra-aftenposten
e24-podden
rss-penger-polser-og-politikk
rss-borsmorgen-okonominyhetene
pengepodden-2
finansredaksjonen
tid-er-penger-en-podcast-med-peter-warren
livet-pa-veien-med-jan-erik-larssen
utbytte
morgenkaffen-med-finansavisen
rss-markedspuls-2
lederpodden
pengesnakk
rss-pa-konto
liberal-halvtime
rss-fa-makro
rss-investering-gjort-enkelt
boligbobla