An eternal discussion in security is whether technology, process or people are the critical element in information security at scale. Most security leaders will tell you it’s the people that matter. Changing people’s behavior to care about security practices requires more than simply taking poor practices off the table. It requires new positive habits and motivations. People connect with stories, and the brain naturally synthesizes the journey of a story with people’s own experiences and relationships.
