Bøker av Perry Carpenter

Mitigate human risk and bake security into your organization's culture from top to bottom with insights from leading experts in security awareness, behavior, and culture.The topic of security culture is mysterious and confusing to most leaders. But it doesn't have to be. In The Security Culture Playbook, Perry Carpenter and Kai Roer, two veteran cybersecurity strategists deliver experience-driven, actionable insights into how to transform your organization's security culture and reduce human risk at every level. This book exposes the gaps between how organizations have traditionally approached human risk and it provides security and business executives with the necessary information and tools needed to understand, measure, and improve facets of security culture across the organization.The book offers:* An expose of what security culture really is and how it can be measured* A careful exploration of the 7 dimensions that comprise security culture* Practical tools for managing your security culture program, such as the Security Culture Framework and the Security Culture Maturity Model* Insights into building support within the executive team and Board of Directors for your culture management programAlso including several revealing interviews from security culture thought leaders in a variety of industries, The Security Culture Playbook is an essential resource for cybersecurity professionals, risk and compliance managers, executives, board members, and other business leaders seeking to proactively manage and reduce risk.

Learn to navigate a world of deepfakes, phishing attacks, and other cybersecurity threats emanating from generative artificial intelligence In an era where artificial intelligence can create content indistinguishable from reality, how do we separate truth from fiction? In FAIK: A Practical Guide to Living in a World of Deepfakes, Disinformation, and AI-Generated Deceptions, cybersecurity and deception expert Perry Carpenter unveils the hidden dangers of generative artificial intelligence, showing you how to use these technologies safely while protecting yourself and others from cyber scams and threats. This book provides a crucial understanding of the potential risks associated with generative AI, like ChatGPT, Claude, and Gemini, offering effective strategies to avoid falling victim to their more sinister uses. This isn't just another book about technology - it's your survival guide to the digital jungle. Carpenter takes you on an insightful journey through the "Exploitation Zone," where rapid technological advancements outpace our ability to adapt, creating fertile ground for deception. Explore the mechanics behind deepfakes, disinformation, and other cognitive security threats. Discover how cybercriminals can leverage even the most trusted AI systems to create and spread synthetic media and use it for malicious purposes. At its core, FAIK is an empowering exposé in which Carpenter effectively weaves together engaging narratives and practical insights, all aimed to equip you with the knowledge to recognize and counter advanced tactics with practical media literacy skills and a deep understanding of social engineering. You will: Learn to think like a hacker to better defend against digital threats. Gain practical skills to identify and defend against AI-driven scams. Develop your toolkit to safely navigate the "Exploitation Zone." See how bad actors exploit fundamental aspects of generative AI to create weapons grade deceptions. Develop practical skills to identify and resist emotional manipulation in digital content. Most importantly, this is ultimately an optimistic book as it predicts a powerful and positive outcome as a period of cooperation, something now inconceivable, develops as it always does during crises and the future is enhanced by amazing new technologies and fabulous opportunities on the near horizon. Written by an expert, yet accessible to everyone, FAIK is an indispensable resource for anyone who uses technology and wants to stay secure in the evolving digital landscape. This book not only prepares you to face the onslaught of digital deceptions and AI-generated threats, but also teaches you to think like a hacker to better defend against them.

Expert guidance on the art and science of driving secure behaviorsTransformational Security Awareness empowers security leaders with the information and resources they need to assemble and deliver effective world-class security awareness programs that drive secure behaviors and culture change.When all other processes, controls, and technologies fail, humans are your last line of defense. But, how can you prepare them? Frustrated with ineffective training paradigms, most security leaders know that there must be a better way. A way that engages users, shapes behaviors, and fosters an organizational culture that encourages and reinforces security-related values. The good news is that there is hope. That's what Transformational Security Awareness is all about.Author Perry Carpenter weaves together insights and best practices from experts in communication, persuasion, psychology, behavioral economics, organizational culture management, employee engagement, and storytelling to create a multidisciplinary masterpiece that transcends traditional security education and sets you on the path to make a lasting impact in your organization.* Find out what you need to know about marketing, communication, behavior science, and culture management* Overcome the knowledge-intention-behavior gap* Optimize your program to work with the realities of human nature* Use simulations, games, surveys, and leverage new trends like escape rooms to teach security awareness* Put effective training together into a well-crafted campaign with ambassadors* Understand the keys to sustained success and ongoing culture change* Measure your success and establish continuous improvementsDo you care more about what your employees know or what they do? It's time to transform the way we think about security awareness. If your organization is stuck in a security awareness rut, using the same ineffective strategies, materials, and information that might check a compliance box but still leaves your organization wide open to phishing, social engineering, and security-related employee mistakes and oversights, then you NEED this book.