BROADCASTS.com

In this episode, Chris Hadnagy and Ryan MacDougall are joined by Michael Fortune.\\xa0 Michael is the Security\\u202fBehaviours\\u202fTeam Manager for British Telecom (BT) UK.\\u202fMichael has been with BT for an amazing 22 years, where he is currently BT\\u2019s expert on security behavior, insider threat behavior,\\u202fand\\u202fsocial engineering, and helps guides the business around these risks. With over 160 thousand employees across the globe\\u202fin his charge, Michael helps run a team of experts who support and drive security programs for the company.\\u202f July 19, 2021

00:00 \\u2013 Intro\\xa0

www.social-engineer.com\\xa0

www.social-engineer.org\\xa0

www.innocentlivesfoundation.org\\xa0

Managed Voice Phishing\\u202f

Managed Email Phishing\\u202f

Adverserial\\u202fSimulations\\u202f

Social-Engineer channel on SLACK\\u202f

CLUTCH\\u202f

03:37 \\u2013 Michael Fortune Intro

05:22 \\u2013 Michael\\u2019s Path \\u2013 how has your background in psychology helped with cyber and information security?

06:10 \\u2013 Have you been able to use psychological principles in eduction?

07:27 \\u2013 How do you keep education engaging for 160,000 people?

10:07 \\u2013 Top down approach

12:51 \\u2013 You are essentially performing an SE gig in order to get an SE gig

14:03 \\u2013 What\\u2019s your rule set?

15:59 \\u2013 Senior Management Buy In \\u2013 people are afraid of doing that so they don\\u2019t do it.\\xa0 How do you approach that?

\\xa019:08 \\u2013 Where is the ethical line in using social engineering to get buy-in?

21:21 \\u2013 Explaining to upper management the repercussions of not doing this training

22:52 \\u2013 Were your CISO and Director of Protections always on board or did you have to convince them?\\xa0

25:56 \\u2013 What have you learned from your hundreds of thousands of SMishing attacks under your belt?

29:18 \\u2013 Advice about getting buy-in from the top down can work for any sized company

\\xa030:30 \\u2013 When you talk about personalizing the sessions that you do, do you personalize to the department, or\\xa0

33:05 \\u2013 Following through with a good program

36:24 \\u2013 The idea is to get people to do it

39:22 \\u2013 What are some action steps that corporations should start doing right now?

42:00 \\u2013 Experience is everything

42:40 \\u2013