Tag

organizational security culture

Posts exploring how organizations can build and sustain a strong security culture from leadership down. This tag addresses security-first mindsets, policy adoption, executive buy-in, behavioral change strategies, and fostering shared accountability for protecting digital assets across every department.

posts

phishing training for employees

Phishing Training for Employees: What Actually Works

In 2023, MGM Resorts lost roughly $100 million after a threat actor called a help desk, impersonated an employee found on LinkedIn, and talked their way past security controls. No zero-day exploit. No nation-state malware. Just a phone call. That incident crystallized something I've been telling organizations for

Carl B. Johnson Feb 09, 2020 8 min read