Research / Principles
Principle 5 of 8
People recognize manipulation by matching it to stories they have heard. Stories that travel person to person spread recognition faster than any portal.
Facts-and-advice training beat no training only when presented by a security expert, while story-based training worked much better when told by a peer. Who delivers training can strongly change security outcomes.
Awareness campaigns fail when they only provide information: people must be able to understand and apply advice and be motivated to act, which requires attitude and intention change. Reviews persuasion techniques, including fear appeals, and lists factors behind campaign success or failure.
Tells teammates about attempted scams they spotted, in their own words.
Designs training that supports autonomy, competence, and belonging, and uses peers as messengers.