1. The US Office of Personnel Management seems to have lost control of sensitive human resources records for virtually every US Government employee and retiree, as well as up to 1 million former employees. Cyber attackers reportedly also stole about 4 million exposed employee records included security clearance investigation information. Incredible.
2. Numerous medical devices have been found to have vulnerabilities that could result in having fatal dosages of drugs injected into patients  (...e.g. the Homeland episode where the VP's pacemaker is hacked and induces a heart attack)
3. Major flaws in Apple and Samsung device software were recently discovered that could be easily exploited by attackers to gain access to sensitive information and passwords on devices.

Let's Be Realistic About the Times We Live In

So, before you get too cynical about how poorly security is being managed around you, think about how much you (and the providers you rely on) are spending on security. From a business point of view, if you have a limited security budget, and you don't scale back the scope of what you are building, to make sure you can afford to do security properly, you should expect the risk to be higher.  Few businesses I've seen lately understand this. 

Until we all make an effort to put proper security in place, and demand that suppliers do so, too, we should either try to understand and accept the risks, or refuse to use the systems. You don't get "amazing" things without some expected costs.   Businesses need to budget properly for security, but we, as consumers, also have to budget for security and privacy in every part of our lives. 

1. By default, anyone can view your profile and posts on Instagram. But, you can make your posts private. 
2.  If someone was already following you before you set your posts to private and you don't want them to see your posts, you can block them.
3. You can block someone to get them to stop following you. People aren't notified when you block them. Learn more about blocking people.
    

• Live Training Sessions -
  I provide live on-site training, as well as webinars, for businesses who want to quickly engage staff. This often occurs in environments where it's important to get feedback from staff during the sessions. A workshop setup can result in some immediate actionable insights that will improve the effectiveness of your security program, since staff are more invested in the safeguards selected.

• Comptuer-Based Training (CBT's) -
  Websites can be created that lead employees through the key security topics on which your business wants people to focus. Engaging images and animations can be included to make the content more relevant and interesting. You can also include self-assessment and auditable quizzes.I've created these kinds of tailored Intranet-based web applications for general security awareness, as well as specific compliance initiatives and even records management policy awareness.

• Social Engineering Security Audits - Sometimes it's hard to know how vulnerable your team is, and to have good metrics to present to management. I can create tailored social engineering audits such as phishing assessments and USB drive handling tests (like the Honey Stick Project). I can use any of several new tools on the market to create and manage a repeatable program that you can use to guide awareness training, policy development and management reporting.

• Social Media Risk Management -
  The use of social media for personal communications, as well as for marketing, HR and publicity, is a whole new risk area for businesses. There are new tools available for monitoring and alerting management to threats and reacting to them. I can help you navigate through this uncharted territory.

• Games and Quizzes -
  Gamification is a great way to engage employees and prospects. I have a framework for a "trivia-game" style application that can be used in trade show booths and kiosks. It is totally customizable, so you can use any category names, with any questions and any multiple-choice answer options.

• Demo Example: Dave's adventure with a USB drive from work...

  NEW! - Streetwise Security Awareness  Animated Clips -
  Another effective way of engaging people is with animations. I can create short, narrated animations (up to 2 minutes) that can be put on internal websites or used for public consumption on sites like Youtube. I am also building a library of inexpensive security animations you can purchase and use in your own programs. Click HERE to or on the image above to watch a short animated video clip called "Dave's adventure with a USB drive from work...".