From Shame to Fame: Changing Behaviors and RSAC Interviews from Tanium and Illumio - Andrew Rubin, Craig Taylor, Tim Morris - BSW #444

About this episode

The episode discusses the need to shift security awareness training from shame to positive reinforcement and gamification.

Why have security awareness training programs failed? Maybe we need to understand human psychology. Humans don't like tricks, or to be shamed, or negative emotions. Humans want to be rewarded, but yet our training and phishing programs are not built for reward. Maybe it's time to rethink cyber literacy. Craig Taylor, CEO and Co-founder at CyberHoot, joins Business Security Weekly to discuss why we need to shift our Cyber Literacy industry from shame and punishment towards gamification, positive reinforcement, and small rewards. If we truly aspire to change behaviors, then we need a different approach. Craig will discuss how a multi-disciplinary approach rooted in science is the future of training and phishing programs. Segment Resources: Individual Registration (Free Personal Training for Life): https://cyberhoot.com/individuals/ Newsletter Registration: https://cyberhoot.com/newsletters/ Blog Articles: https://cyberhoot.com/blog/ Cybrary (Library of 1000+ Cybersecurity Terms in non-technical language): https://cyberhoot.com/cybrary/ Special Podcast Offer: 20% off CyberHoot for 1 year using the podcast’s unique coupon code: "Business Security Weekly" From Reactive to Autonomous…

People in this episode

Guest: Craig Taylor

Topics covered

• security awareness training
• human psychology
• gamification
• positive reinforcement
• cyber literacy

Keywords

• security awareness
• human behavior
• training programs
• cyber literacy
• gamification

Sponsors

CyberHoot

Mentioned in this episode

Organizations: CyberHoot

More episodes of Security Weekly Podcast Network (Audio)

• Phones, Sarlaccs, Maine, Chinese Sites, Ivanti, Bitlocker, Peoplesoft, and More - SWN #589 · June 12, 2026 · 32 min
• Trolling Microsoft With Vulnerabilities - PSW #930 · June 11, 2026 · 2h 3m
• Innovation Without Data Security Risk as AI Unlocks Budgets and Identity Challenges - Tony Kelly - BSW #451 · June 10, 2026 · 1h 1m
• Geinbot, SolarWinds, Brave, UNK_Deaddrop, durabletask, Insta, Aaran Leyland... - SWN #588 · June 9, 2026 · 28 min
• Scanner Results Are a Starting Point. Here's What Comes Next. - Federico Kirschbaum - ASW #386 · June 9, 2026 · 1h 16m
• The State of AI in SecOps, the Unintended Consequences of Vulnmaxxing, and the News - Filip Stojkovski - ESW #462 · June 8, 2026 · 1h 38m