Tag

Organizational Security Culture

Explores how organizations cultivate a security-first mindset across every department and role. Covers leadership commitment, security champions programs, behavioral nudges, policy communication, and measurement frameworks that transform cybersecurity from an IT concern into a shared organizational value.

posts

Cybersecurity Awareness Month

Cybersecurity Awareness Month: What Actually Works

October Ends. The Phishing Emails Don't. Every October, organizations plaster break rooms with cybersecurity posters, blast out a few reminder emails, and call it a win. Then November rolls around, and the same employees click the same malicious links. I've watched this cycle repeat for over

Carl B. Johnson Feb 28, 2024 7 min read
Phishing Awareness Program

Phishing Awareness Program: Build One That Works

One Click Cost Them $100 Million In 2023, MGM Resorts was brought to its knees — not by a sophisticated zero-day exploit, but by a phone call. A threat actor called the help desk, impersonated an employee found on LinkedIn, and gained access to internal systems. The resulting ransomware attack cost

Carl B. Johnson Jan 19, 2020 7 min read