Reviews

In this evolving industry, it's both refreshing and reassuring to find people like Bruce leading the charge on researching fields outside of our own to better shape how we influence security culture and behaviour. Keeping a wider perspective and the end goal of positive security culture change in mind only serves to benefit us, and this book is the perfect combination of easily digestible reflection, information and valuable recommendations and actions for senior leaders, CISOs, CIOs and security awareness professionals alike.Louise Cockburn - Education & Awareness Manager, Burberry An insightful and highly informative read for security practitioners, business leaders, psychologists and behavioural scientists alike. Re-Thinking The Human Factor explores more than just cyber security, it delves into the behavioural and cultural aspects of building, influencing and managing meaningful messages. Highly recommended A*!Inderpal Dhami, IBM SecurityIn this book, Bruce makes security personal and highlights the human factor element that runs through everything we do as security professionals, whether we acknowledge it or not. The book demonstrates how important is to listen rather than just broadcast, and to think about not just WHAT we want to say but HOW we should say it. And why we need to resist the temptation to just fall back on technology measures or let user awareness become a compliance box-ticking exercise. Bruce shows us how, as security professionals, we can up our game and get better results for the organisations that hire us. He explores many areas of interpersonal communication to create a clear understanding of why these play such a vital part in grabbing the attention of the audience. He succinctly explains how we can make the rules easy to understand - and act on - and establishing the part everyone must play to make it work.I thoroughly enjoyed reading this book and, although I like to think of myself as having a pragmatic and empathetic approach to infosec, there is always more to learn and I have certainly come away with some more ideas of how to communicate more effectively, change behaviours and nurture a good culture of security.Matt Gordon-Smith - CISO, Anglo American