Can Technology Solve Phishing?

Published: Sept. 23, 2021, 10 a.m.

All links and images for this episode can be found on CISO Series

Check out\xa0this post\xa0for the basis for our conversation on this week\u2019s episode which features me,\xa0David Spark\xa0(@dspark), producer of CISO Series, co-host\xa0Geoff Belknap\xa0(@geoffbelknap), CISO,\xa0LinkedIn, and our\xa0guest\xa0Robert Wood\xa0(@holycyberbatman), CISO at\xa0Centers for Medicare & Medicaid Services.

Thanks to our podcast sponsor, Living Security

Traditional approaches to security communication are limited to one-off training sessions that fail to take customers, regulators, and other external stakeholders into account and rarely affect long-term behavioral change.\xa0This report\xa0lays out a four-step plan that CISOs should follow to manage the human risk. It provides design principles for creating transformational security awareness initiatives which will win the hearts and minds of senior executives, employees, the technology organization, and customers.

In this episode:

  • Will there be a day that phishing can be solved by technology?
  • Does more training lower risk?
  • Is it enough just to protect "inside" the environment?
  • What can we do to change the culture?