Click Here Now - A Positive Way to Create Phishing Awareness

Learn how to transform traditional phishing simulations from shame-inducing exercises into positive awareness-building experiences in this 38-minute conference talk from The Diana Initiative 2025. Discover why conventional phishing training methods often fail to create lasting behavioral change and instead generate negative emotions that can harm workplace culture. Explore a revolutionary approach that draws inspiration from natural disaster drills familiar from elementary school, creating psychologically-informed training methods that satisfy regulatory requirements while fostering a supportive security culture. Understand how to implement phishing awareness programs that encourage smart risk-taking, leverage diverse perspectives, and prioritize individual growth and development. Gain insights from Aaron Stanley, who heads Security and IT functions at dbt Labs and brings extensive experience from roles at Stroz Friedberg, Apple, and Twilio, as he shares practical strategies for building security awareness that empowers rather than embarrasses employees. Master techniques for creating training programs that meet the needs of both cybersecurity teams and regulatory bodies while maintaining a positive organizational culture focused on collective security improvement.