Understanding human behavior in the face of cyber threats

What are different questions arising through what expresses the analysis of behavior, especially What do we do?, How do we think? and How are decisions taken?, in the approach of containment and perception of the threats that emerge day with day of the computers themselves in the workstations or personal in each home.

What highlights is that among the mistakes that are most common, it is assumed that the topics about awareness have been created in a personal way and not to think as a user, follows with a technical syringe that is only understandable for those who dominate computer and cybersecurity issues, being a distant concern for those people who have prepared to work in different areas of business economic role, by which one should create empowerments with a more flexible and flexible understanding language.

It can be explained that, on several occasions, what we express for your tecnicism can leave more doubts and incognites, for this lack of understanding that can become boring and distracts the person. The primary objective is really lost during the exercise, and the proposed goals are not achieved as the change behavior to improve the responsible use of the equipment and its tools and services that were installed for use, to take action the protection of information and critical infrastructure, form habits in a culture of threat detection and possible vulnerabilities, motivate people to improve your daily practices behind your access.

Often the content comes to the person in a complicated or too broad way for his understanding, so that a practical exercise is carried out in the exchange of knowledge and experiences, such as the example of a seller who has all the intentions of promoting a new product, which is little known or unknown in its entirety, but in his eagerness to sell them describe them as a necessary article and buy with that vision, which then generates an analysis of a personal way if it was needed.

In this sense, people who work in the midst of cybersecurity have to sell all this vital information scheme to reduce risks in the face of any vulnerability, so that it arrives adequately to the end user and understands its importance in their working environment. But for this, it is necessary for Marketing employees to form something that allows to convince the customer, and therefore has to take the role of a marketing worker and start a game on the analysis of human profiles, their thoughts and behaviors for the understanding of their decision making. The result of this exercise is that awareness is to sell, and that it is sold:

• New Ideas
• The motivation for changing behaviors
• Trust

The first point to consider is that people are customers who must be sold services or products. Some of the things that have been instructed me when studying the business master's degree, especially in the marketing course, is that the most important thing is to meet your client, around your preferences, to offer something that will really buy and will buy, capturing your service.

And about that I always had the taste for this phrase:

In the same way that this type of emotional or instinctive ads are left more than rational, they should be delivered to people so that awareness produces better results.

And how can one achieve?

First, note how the leading AMAZON e-commerce corporation, to influence the purchasing decision process of its customers, is based on the representation of the benefits and advantages of buying online.

Case Amazon

Having clear this example as one of the marketing tools to sell a product or service, it can be applied to cybersecurity.

First: A classification of the level that exists on the security awareness in which the target people are.

Second: After classification, a content or a learning route can be mounted depending on your application level. For example:

• Low level: the purpose awakens the person's interest or creates a need, which can be done transmitting fresh, friendly and fun content (containing real-life stories or experiences, references with memes, jokes, among others).
• Middle level: the goal is that when one has already been able to awaken this interest, one must influence the desire. At this level one can already play themes a little more technical, but with a simple explanation when speaking or mentioning, introducing phishing, vishing, Trojans, viruses, rasomware using a number of examples.
• Level High: It should lead people to the action of the purchase, that is, at this point it can already be considered that they are ready to sell the product, which in this case are presented the policies, standards, safety procedures and all the desired scheme. But in order not to use these terms or techniques, your name may be changed as, for example, calling them agreements.

With all this information and experience schemes, one can avoid continuing to generate awareness programs that will only have a favorable result in boring skills and that more than generate a positive value for companies, generate strangulations and obstacles in business processes.