“Winter, slumbering in the open air, wears on its smiling face a dream...of spring.”
Borrowed from the Samuel Taylor Coleridge poem “Work without Hope,” this quote may seem a bit touchy-feely, but we have found that the most successful security awareness and training programs have a common thread: a belief that their efforts can change behaviors and reduce risk.
Organizations that are taking a thoughtful approach, that are engaging users up and down the org chart, and that are working to build a culture of security are seeing the best results. If you have relegated cybersecurity education to a “check the box” activity, your users are checking the box right along with you. And this can certainly cast a shadow over your efforts.
While it’s true that hope is not a strategy…neither is hopelessness. If you don’t believe in your efforts, you shouldn’t expect them to pay off. How you — and your end users — feel about cybersecurity does matter.
Here’s to finding your spring at the end of a long winter.