Shaping Language in Cybersecurity For People • Ceri Jones • GOTO 2023

Shaping Language in Cybersecurity: Learn how to communicate effectively with non-experts, adapt language for different audiences, and create a culture of security and trust.

Key takeaways
  • Language in cybersecurity can be detached from everyday life, causing confusion for non-experts.
  • Cybersecurity professionals should communicate in a people-centric approach.
  • Collaboration and mutual understanding are essential for effective cybersecurity.
  • It’s crucial to frame security information positively, rather than scaring people.
  • Using simplistic language (e.g., “easy cyber”) can be misleading.
  • Many people have limited understanding of cybersecurity concepts, and it’s essential to adapt language for different audiences.
  • Passwords are not the only security issue, but a significant contributor to many problems.
  • It’s essential to have feedback mechanisms to uncover potential mistakes and biases.
  • Cybersecurity is not just about performing specific tasks, but also about supporting the organization and people within it.
  • It’s necessary to address potential biases in language and messaging.
  • Technology and humans are intertwined; understanding human behavior is crucial for cybersecurity.
  • Cybersecurity should be viewed as an experience, not just a series of rules and checklists.
  • It’s essential to involve different stakeholders in the decision-making process.
  • Cybersecurity is not just about preventing threats, but also about creating a culture of security and trust.
  • It’s important to teach people about security in a way that fosters collaboration and engagement.
  • Cybersecurity should be seen as a shared responsibility among stakeholders.
  • It’s essential to understand the impact of language and messaging on the audience.
  • Cybersecurity education should focus on creating a culture of security and trust, rather than just imparting knowledge.