好的，我现在需要帮用户总结一下这篇文章的内容，控制在100字以内。首先，我得仔细阅读文章，找出主要观点。 文章开头提到安全意识培训失败的原因，可能是因为忽视了人类心理学。人类不喜欢被羞辱或惩罚，而是更喜欢奖励。作者 Craig Taylor 提出应该将安全培训转向游戏化和积极强化，用小奖励来激励行为改变。这似乎是一个关键点。 接下来的部分讨论了AI在安全中的应用，提到AI的有效性依赖于数据和可见性，但很多企业在这方面还存在问题。这可能是一个次要点，但需要包含在内。 最后，Andrew Rubin 讨论了网络安全中的谎言和需要改变的现状，强调基础建设的重要性。这也是一个重要的观点。 现在我需要将这些内容浓缩到100字以内。重点包括：培训失败的原因、心理学因素、游戏化和奖励机制、AI依赖数据、基础建设薄弱以及领导层的问题。 可能的结构是：先讲培训失败的原因和解决方案，然后提到AI的问题，最后总结基础建设和领导层的问题。 检查字数是否合适，并确保信息准确无误。 </think> 文章探讨了安全意识培训失败的原因，并提出应从心理学角度重新设计培训方式，采用游戏化、积极强化和奖励机制来激励行为改变。同时讨论了AI在安全中的应用挑战及网络安全中的虚假观念与实际问题。 2026-4-22 09:0:0 Author: sites.libsyn.com(查看原文) 阅读量:13 收藏
Apr 22, 2026
Why have security awareness training programs failed? Maybe we need to understand human psychology. Humans don't like tricks, or to be shamed, or negative emotions. Humans want to be rewarded, but yet our training and phishing programs are not built for reward. Maybe it's time to rethink cyber literacy.
Craig Taylor, CEO and Co-founder at CyberHoot, joins Business Security Weekly to discuss why we need to shift our Cyber Literacy industry from shame and punishment towards gamification, positive reinforcement, and small rewards. If we truly aspire to change behaviors, then we need a different approach. Craig will discuss how a multi-disciplinary approach rooted in science is the future of training and phishing programs.
Segment Resources:
Individual Registration (Free Personal Training for Life): https://cyberhoot.com/individuals/ Newsletter Registration: https://cyberhoot.com/newsletters/ Blog Articles: https://cyberhoot.com/blog/ Cybrary (Library of 1000+ Cybersecurity Terms in non-technical language): https://cyberhoot.com/cybrary/ Special Podcast Offer: 20% off CyberHoot for 1 year using the podcast’s unique coupon code: "Business Security Weekly"
From Reactive to Autonomous: Real-Time Endpoint Intelligence in the Age of AI As organizations experiment with agentic AI and autonomous security operations, many are discovering a difficult reality: AI is only as effective as the data and visibility behind it. Yet most enterprises still struggle to answer basic questions about their endpoints in real time.
In this conversation, we’ll explore how IT and security teams are evolving from reactive operations toward proactive, preventative, and ultimately autonomous models. The journey begins with real-time endpoint intelligence—the ability to see, understand, and act across every endpoint in seconds.
This segment is sponsored by Tanium. Visit https://securityweekly.com/taniumrsac to learn more about them!
Hard Truths: The Lies We Keep Buying in Cybersecurity Cybersecurity isn’t broken because of a lack of technology—it’s broken because the industry avoids hard truths. Fear still drives budgets. AI is oversold as a cure‑all while foundations remain weak, and CISOs are held accountable without the authority to change outcomes. In this conversation, Illumio CEO and founder Andrew Rubin breaks down what must change to build real resilience—because the next breach won’t just impact the business, it could end a career.
For more information about Illumio, please visit: https://securityweekly.com/illumiorsac
Visit https://www.securityweekly.com/bsw for all the latest episodes!
Show Notes: https://securityweekly.com/bsw-444
如有侵权请联系:admin#unsafe.sh