In this episode of "The Entropy Podcast", host Francis Gorman speaks with Craig Taylor, CEO of CyberHoot, about the challenges and innovations in cybersecurity awareness training. They discuss the failures of traditional phishing awareness programs, the importance of positive reinforcement in training, and the role of gamification in engaging employees. Craig shares insights on the evolving threat landscape, particularly the impact of AI on phishing attacks, and highlights the vulnerabilities of small and medium enterprises (SMEs) to cyber threats. The conversation concludes with a look at the economics of cybercrime and the future of cybersecurity training.

Takeaways

• Most phishing awareness programs fail due to low engagement.
• Traditional training methods show minimal behavioral change.
• Positive reinforcement is more effective than punishment in training.
• Gamification can significantly increase engagement in cybersecurity training.
• SMEs are more likely to be targeted by cyber attacks than larger enterprises.
• AI is being used to craft more sophisticated phishing attacks.
• Cybercrime is now one of the largest economies in the world.
• Effective training can lead to better client retention for MSPs.
• Continuous improvement is key in cybersecurity awareness.
• CyberHoot offers free access to individuals for training.

Sound Bites

• "Humans are the weakest link."
• "Reinforced behaviors are repeated."
• "AI is a game changer for hackers."

Additional Information:

Craig has arranged for Entropy Podcast listeners to receive a 20% discount on a one-year subscription to CyberHoot. You can access it using the coupon code: The Entropy Podcast. 

CyberHoot Resources:

• Main Website: https://cyberhoot.com/
• Individual Registration (Free Personal Training for Life): https://cyberhoot.com/individuals/
• Business Registration (Direct Power Platform Signup): https://cyberhoot.com/businesses/
• Reseller / MSP Registration (Partner Signup): https://nest.cyberhoot.com/partner-signup/
• Newsletter Registration: https://cyberhoot.com/newsletter-signup/
• Blog Articles: https://cyberhoot.com/blog/
• Cybrary (Cybersecurity Library of Terms in Layperson language): https://cyberhoot.com/cybrary/