Security training

Question 1

Awareness, Education, Training

Answer 1

Awareness: Why is security important? What is my role?
Education: Assets and impacts, attack scenarios etc.
Training: Install secure behaviours, remove insecure behaviours

Question 2

Habits

Answer 2

Automatic, save effort, can be learned but hard to rewire, no need for concious evaluation

Question 3

Behaviour change

Answer 3

Not by willpower alone, small goals, motivation not enough either
Self-efficiacy can help

Question 4

Compliance

Answer 4

Traditional: Follow plan set by professional
Concordance: Agree on plan together and identify treatment

Question 5

Behaviour change approaches

Answer 5

Traditional: Increase motivation through awareness
New approach: Use motivation to prepare context, Use motivation to change behaviour

Question 6

Habits inner work

Answer 6

Cue: Signal to start behaviour (Time, routine)
Response: Linked to cue (movement, thoughts)
Reward: Social recognition, environment change

Question 7

Creating new habits

Answer 7

Intentional forgetting: Remove cues of undesired habits, make new cues salient, reward new behaviour
Nudging: Requires nudgee to want to get to goal