It's The Trickery While Empowering Employees and Redesigning Work for AI - Frank Riccardi - BSW #472
Summary
Frank Riccardi discusses why cybersecurity awareness training often fails, emphasizing that understanding human trickery is more critical than focusing on technology. He highlights the need for continuous, risk-based education and practical controls like callback verification to combat AI voice cloning and deepfakes. The episode also covers leadership research on authentic decision-making and the importance of operationalizing security processes rather than relying solely on new tools.
Topics discussed
Episode intro and guest Frank Riccardi
Host introductions and football weekend chat
Why Cybersecurity Awareness Month fails
Moving beyond annual training modules
Shifting security culture and best practices
Tailoring training to specific business risks
Balancing realism in phishing exercises
Trickery vs. technology: The Wi-Fi Pineapple
Practical cyber hygiene for public Wi-Fi
Building 'cyber warriors' in business units
Operationalizing security and QR code myths
Identifying malicious QR codes and tampering
Detecting AI voice cloning and CEO fraud
Establishing callback protocols for verification
Encouraging reporting of false positives
Designing resilient systems for human error
Cybersecurity vs. customer satisfaction trade-offs
Cyber hygiene as defense against rogue AI
Sponsors and upcoming virtual summit
CISOs as business risk translators
The gap in proactive prevention efforts
Human resilience vs. technology spending
Soft skills for CISO leadership
Research on authentic leadership pitfalls
Unconventional choices vs. setbacks
Redesigning work for AI and HR collaboration
Effective AI adoption communication strategies
Empowering junior employees for transformation
Career development and certification paths
Listen ad-free on Castria