JW Goerlich on Training, phishing exercises, security metrics,getting the most from user training

<p><span style="font-weight: 400;">JW Goerlich - </span></p> <p><span style="font-weight: 400;">“Wolfgang is a cyber security strategist and an active part of the Michigan security community. He co-founded the OWASP Detroit chapter and organizes the annual Converge and BSides Detroit conferences. Wolfgang has held roles such as the Vice President of Consulting, Security Officer, and Vice President of Technology Services. He regularly advises clients on topics ranging from risk management, incident response, business continuity, secure development life cycles, and more.”</span></p> <p> </p> <p><a href="https://jwgoerlich.com/"><span style= "font-weight: 400;">https://jwgoerlich.com/</span></a></p> <p> </p> <p><span style="font-weight: 400;">RSA talks and discussion</span></p> <p><br /> <br /> <br /> <br /></p> <p><span style="font-weight: 400;">Phishing tests - </span></p> <p><a href= "https://www.securityweek.com/research-simulated-phishing-tests-make-organizations-less-secure"> <span style= "font-weight: 400;">https://www.securityweek.com/research-simulated-phishing-tests-make-organizations-less-secure</span></a></p> <p><a href= "https://hbr.org/2021/04/phishing-tests-are-necessary-but-they-dont-need-to-be-evil"> <span style= "font-weight: 400;">https://hbr.org/2021/04/phishing-tests-are-necessary-but-they-dont-need-to-be-evil</span></a></p> <p><br /> <br /> <br /></p> <p><span style="font-weight: 400;">What are the goal of these tests?</span></p> <p><span style="font-weight: 400;">   </span> <span style="font-weight: 400;">That someone will click and activate (is that not a given?)</span></p> <p><span style="font-weight: 400;">What made them popular in the first place?</span></p> <p><span style="font-weight: 400;">Is this an example of management not taking security seriously, so we needed proof?</span></p> <p> </p> <p><a href= "https://www.csoonline.com/article/3619610/best-practices-for-conducting-ethical-and-effective-phishing-tests.html"> <span style= "font-weight: 400;">https://www.csoonline.com/article/36