Episode Details

As cybercrime grows more sophisticated day by day, so do technical defenses. But great technology is no match for an employee clicking on a simple phishing email. Psychological security is designed to protect the human mind from manipulation that leads to compromises.

Today's guest is Adam Anderson. Adam is chairman of the board for Hook Security and a serial cybersecurity entrepreneur. He is one of the founders of the Psychological Security Movement. Psychological Security or "Psy-Sec," was born to create new technologies and processes to help build resilient human minds that can resist manipulations through technology.

Show Notes:

• [1:10] - Adam introduces himself as a serial cybersecurity entrepreneur who has launched 21 companies over 20 years. He is passionate about this topic.
• [2:24] - The human part of cybersecurity is always the weakest link.
• [4:01] - Chris and Adam discuss how when you work in IT, you look at things through an IT lens, but there is a human side.
• [5:21] - Security is typically an afterthought that comes after an incident.
• [5:51] - Adam breaks down the meaning of security and what types you will see within a company or corporation as being physical security and info security.
• [6:42] - Adam says that both types of security are vulnerable to social engineering.
• [7:31] - Hook Security was created after Adam worked in frustration for 20 years. He is chairman of the board and hired a successful educator as CEO who is an expert in how people learn.
• [9:23] - Adam is a firm believer that "Psy-Sec" needs to be a separate department of professionals who can work to build resilience in human brains to resist manipulation.
• [11:15] - It is unreasonable to expect the IT department to be proficient in the human interface as it is not in their skillset.
• [12:42] - Adam states that systems are 95% safe from compromise which is a great improvement, but when you have a large company, 5% is still too much.
• [13:12] - Right now, Adam is working with the cognitive brain function and explains the details on how this works in regards to psychological security.
• [15:10] - There are two ways to lay down memories and "fight or flight." One is through fear and one is through humor.
• [16:27] - People are better at remembering something that made them laugh and Adam trains people with this in mind.
• [18:26] - Hook Security provides Security Awareness Training that people actually enjoy.
• [19:06] - Hook Security is being very careful with how they present their findings and taking their time with the science elements involved so that it is used for good and not as a tool for attackers.
• [21:54] - Social engineering is no different from simple marketing. Marketing is there to show you something that you may find valuable and hope that you click on it. Social engineering is the same, but "with a different punch line."
• [22:56] - There's a database. You're in it. You are a product. If you are getting something for free or are paying something low, you are the product. Adam uses a Netflix example to demonstrate this.
• [24:52] - With the way YouTube and Netflix work, you are trusting big corporations to have your best interests at heart.
• [25:52] - We are all wired to help others. These hard-wired responses allow marketers and attackers to take advantage.

• Listen Now