Have you ever had a doctor give you a pill to cure whatever ails you without first finding out what your symptoms are?

Of course not. That would be unprofessional and reckless.

Yet, that’s the equivalent of what many IT professionals are doing when they send their users training videos about how to avoid things like phishing scams. These videos or other one-size-fits-all anti-phishing training materials work to a point, but they aren’t nearly as effective as they could be with a little more understanding of the patient, erm, I mean, user.

In this episode, Arun Vishwanath, cybersecurity expert and Associate Professor at the State University of New York at Buffalo, explains how the disease of phishing can only be cured by correctly diagnosing the symptoms in each user.