Making Your Trainings Less Boring

Listen to learn how to make trainings more enjoyable.

SecurityMetrics Podcast | 43

Making Your Trainings Less Boring

"If you want to engage your audience and get them involved in security rather than having to force them to do it, you need to give them something worth their time and attention."

Holding trainings for any audience can be hard, especially when it's mandatory. Ian Murphy (Founder of Cyber Off, CISSP, FBCS, CITP) sits down with Host and Principal Security Analyst Jen Stone (MCIS, CISSP, CISA, QSA) to discuss his approach to making trainings more enjoyable.

Listen to learn

  • Tips to make your trainings more enjoyable
  • How to have fun with boring topics
  • How to respond to negative feedback

Resources:

Connect with Ian on LinkedIn

Download our Guide to PCI Compliance! - https://www.securitymetrics.com/lp/pci/pci-guide

Download our Guide to HIPAA Compliance! - https://www.securitymetrics.com/lp/hipaa/hipaa-guide

[Disclaimer] Before implementing any policies or procedures you hear about on this or any other episodes, make sure to talk to your legal department, IT department, and any other department assisting with your data security and compliance efforts.

Transcript of Making Your Trainings Less Boring

Hello, and welcome back to season three of the SecurityMetrics podcast. I'm Jen Stone. I'm a principal security analyst here at SecurityMetrics, and I am stoked beyond measure about how many people have been downloading and listening and sharing this podcast with their friends. It's allowed me to do another season with you.


And and as we, launch into it, if you have ideas for people you'd like me to talk to or topics you'd like me to cover, totally into hearing that from you. Would love to to know your thoughts. And so don't be shy. You can email us.


You can leave comments, whatever you wanna do. I and I have to give a shout out before I get to our our guest. Hunter, my my producer, who I talk about probably way too often, sorry, Hunter, built this great new studio for me for this this year. And and it's, he's not happy because supply chain issues, and we don't we we are behind on getting some of the things that you wanted to put up.


So it's he's like, it's not even done yet. But it's so cool. If you're not watching on on video, check it out. He did such a great job, and I love this new space.


And, we have some really great guests lined up for you for this season. And I wanted to start off with somebody that I found on LinkedIn, and I watch everything he puts out because it's hilarious.


And it's also, a good way, I think, to teach people about cybersecurity. And I thought gonna kick off the year introducing you to someone who I think you're gonna find valuable as well. Let me let me read off my page so that I don't forget anything. His name is Ian Murphy, and he is the founder of CyberAuth. It's a security awareness and training company. Does a lot of really hilarious videos.


We always ask our guests for their certifications. He probably wouldn't care at all, but he has CISSP, FBCS, CITP. He has a long background in cybersecurity, and so I think you'll find that interesting as well. You'll have to have him tell you because I will forget. So we're gonna talk about cybersecurity in in, terms of training, how you get people engaged in the topics, and and what really good security awareness is all about. Ian, welcome to the show. I am so excited to get to talk to you today.


A lot of people are are familiar with you from your, very funny, presence on LinkedIn and and other places. So I would like you to tell me a little bit about yourself. What is your background, particularly in in the space of cybersecurity, and what kind of brought you to where you are now?


Hey, Jen. Thanks for having me on. Happy New Year as well.


So so my my background in cybersecurity, I've been in it nearly thirty years now. I kinda got in at ninety three, ninety four when I I left university, and I joined the Ministry of Defense. So I spent about ten years with the Ministry of Defense, doing everything from the physical security side and working on cool stuff like submarines and all that type of stuff. And it was really interesting and and cool and got to meet some interesting people. Then I went into, in in into the dot com bubble in London in in, just in two thousand, with a small start up. And we just had a year of fun just just staying drunk. Drinking and being drunk will will be a theme throughout my career, by the way.


So Noted. I I I I I I don't want you in American audience to think I I need an intervention or anything like that, but I'm okay with it.


It's a culture thing. It's a lifestyle choice. It is. Okay.


It is. Well, us British have a totally different approach to drinking. And as an aside, I used to I then went to move to Symantec, and I worked for Symantec for five years. And we'd go to worldwide sales conferences every year, which would be in, like, Nashville or Vegas or Florida or San Diego.


The and, Dallas have been to all those places. And the British continued to come and get drunk for the week, and all the American, employees would look at us thinking, all of you guys have problems. All of you guys need some kind of help, and we're just like, leave us alone. We're fine.


So I think that's the cultural difference the Brits and the Americans. Right?


You guys are fine getting drunk. We would prefer our twelve step programs.


You know, it's Absolutely.


Absolutely. I don't need to talk about my drinker with anybody. Just get me another pint. I'm fine. So k.


So so yeah. It's, so so five five years at Symantec. Really good times. It it was during the the initial time when Symantec went from being an AV to an enterprise security company, and then they went and ruined it by by merging with Velitas.


And then and then I left at that point because because I think that merger, it complicated stuff for me in my mind about what they were trying to do, and and it brought in a sales function that was distasteful in in my view, to be quite honest. It brought in a sales at all costs rather than having fun and enjoying it and being a close knit community.


And and then for since then, since two thousand and six, I I've worked for myself. I I had a year in Australia, in in about two thousand and twelve or so with with I went to work for Dimension Data.


And and if anybody wants to know what the past is like, go work in Australia for a year, because they're, like, social attitudes are, like, twenty years behind the free for the year.


I I I escape I I I love the place, and I love the people. Right? But they say stuff over there, but I go even I go, oh, no. No.


You can't say that. And they're like, yeah. Yeah. Yeah. Of course, we can, mate. That's supposedly an Australian accent.


I have only been once, and I loved it. I would love to go back again.


Alright. Beautiful. It's a beautiful country with wonderful people, but everything wants to eat you out there. Yeah. Everything.


Yeah.


The bugs, the snakes, the spiders, they all wanna eat you.


So so be careful if if you go. So, yeah, for for for all all that time, I've I've then worked for myself.


And and I enjoy that because I I realized that I'm unemployable by anybody.


So so by design and possibly desperation, you are now self employed.


Exactly. Exactly.


So and part of that process, you you founded the business that you have now, which, is CyberArk. Correct?


Yeah. It's it's an unexpected turn for me to be quite honest.


In terms of I never ever once I when I got into this career, I never thought it would end or or or I never thought it'd go where it's going at the moment.


I I've done everything in in security from the techy side to the sales side to leadership, to seesaw stuff, and all all that kind of took compliance regimes and all of that type of stuff.


But but I never thought it would ever go into the entertainment side of things.


Uh-huh.


I don't do don't get me wrong. I I I enjoy a good song and a karaoke. Right? I enjoy getting up in front of people and and telling jokes. You know? I did my first stand up at fifty last year.


That's amazing. Congratulations for doing that. That can't have been easy.


Oh, I I get I get two responses when when I tell people, I I do stand up. The the first response is, oh, I couldn't do that. Oh, that's that's that's a bit difficult to you. And and and they they talk about it as a fearful thing, you know, which which I use in my routine, which is cool because because I give them silly options of what would you do rather than doing stand up. You know? And it's and and and then the and then the other thing they do is they get interested in my genitalia.


Oh, okay. From the point of view where they turn around and go, oh, you must have balls of steel to do that. And I'm like, no. The same as everybody else's.


You know, it's it's just Okay. I I think I think it was about three or four years ago. I was doing videos on LinkedIn to to raise my profile, raise my brand, raise raise the the Ian kind of nonsense. And part of that was just writing post.


Part of it was then. I I I I kind of, moved from writing post to to doing articles, to doing blogs, to to them doing the odd video of me ranting at a subject. Mhmm. And it started off with me ranting, the terrible market and that exists within in cybersecurity or the terrible phrases we use and and things like that.


And it just progressed from there. It's just a a a slippery slope from ranting about something to then dressing up as the Spice Girls to losing your dignity. That is a slippery slope right there.


You have, gleefully slid down that slope, though, and that's actually that is the reason that I was most talking to you is is watching, these wild videos that are that that inform people about cybersecurity topics.


Just, some of them I'd I'd watch three, four times in a row and and just laugh. And and I thought, I need to talk to you because, okay, I hate training.


So so I don't know. And probably most of the of of our listeners do too. You get you know, usually, we have the the online thing and you get this notice. Hey.


You have these trainings waiting for you in this platform. Yeah. Yeah. And and my response is is, who can I pay to take this for?


No. Actually, just kidding. I wouldn't say that. I don't wanna do the training. It's really boring.


And you've taken a completely different tack. Tell me about, the the response to to the the humor in training.


What do you think it brings? Do you think how how do you think how do people respond to you?


First off, I I think humor is one of the best tools to educate. Right?


We have fought for far too long in the industry used fear. Don't do that. Bad things will happen. Oh.


And we've used it to sell. We've used it to train. Right? And and I think that fear, uncertainty, and doubt, whilst it's an emotion to be used, it has to be used sparingly Mhmm.


Because it exhausts people. Yep. People don't wanna hear the skies falling in all the time because our biases protect us from that stuff. We have inbuilt biases that protect us from a whole bunch of stuff, and that's one of the things.


And and I thought to myself, well, what's the thing that kind of helps me and, I remember most from, say, my school days or or or my earlier career? And it was always laughing. It was always the humor that normal people had in their everyday lives and their businesses that could then convey stuff to me. My my first career was as a mechanic.


So I did four before I went to university and joined the mod, I did four years as a mechanic. And it was one of the best four years of my life because it was full of middle aged men who've been mechanics all their lives. And and, actually, their humor and the way they used it taught me and got me through my apprenticeship.


The same as at school, I remember the funny teachers and the lessons they taught.


For the fearful teachers, I only remember getting getting a a a a a slap off them or or things like that when when teachers could hit kids back in the eighties in in the day.


Lived through that. Yeah.


Yeah. You know? So and and they did by the way, for those for for for those kids who are going to school nowadays and watching this thinking, oh, teachers would no.


Teachers were absolute sadomasochists back in the seventies.


Some of them were pretty awful. They would they would come up with with reasons to to give you a good smack or the but I I grew up in I went to school in Canada, and they would give the strap in in that ticket, you know, strap and smack you on the hand with that, and it was awful.


The the cane as well, we would have a bamboo cane and that smack you on the backside with it. And I'm not sure whether it was for their their own pleasure or just to hear you, to be quite honest. You know?


It was just, it was just, it was what they say.


Exactly. And and it isn't. And and and, I I it just got me thinking with with Cyberoff. The the times I've learnt are the times when I've enjoyed it.


When I've paid, attention to a presentation is when is when the presenter has charisma and can hold you in there. And that doesn't mean that they're telling jokes all the time, but they have something about them. I see too many in our industry who class themselves as keynote speakers and stuff like that, who have the charisma of this wooden table that my laptop sits on.


First. Yeah.


Yeah. Exactly. You know? And and and and I I always get from my family. So I'm I'm the I'm the default IT support for the whole of my family and all my friends.


Right? And I get, is this a scam? Is that a scam? Is I thought, what can I do to help those guys Mhmm?


To make it fun, to make it entertaining?


And it was just a progression of my rantiness on LinkedIn that kinda moved into into more of more of a cyber education.


And that just seemed to take hold of people. That just seemed to, the feedback I got from it was largely positive. I obviously get some people who who get offended, but those people would be offended at at at an envelope or or a or a cardboard box or something like that.


So I think there are people who want to be offended because it feeds some kind of emotion in them that they wanna foster. And and I Absolutely. I find that just so exhausting.


Like, I I thought it was funny what you said about keynote speakers. I did give a keynote for the first time this year, and I got told that I triggered one person terribly, and they were very offended. And I thought, I'm not sure whether that's good or bad, but at least it's an emotional response.


So Absolutely.


Yeah. Yeah. Yeah. And and and you then have to worry about the so so when somebody says to me, oh, I'm offended at that.


I I faced off, I I worry if if I have intentionally offended somebody, and I never set out to do that. I never set out to offend anybody. I never set out with the intention of of singling somebody out and making them the butt of the joke. I'm always the butt of the joke, or concepts are the butt of the joke, or organizations are the butt of the joke.


They're never a person. Right? Right. Because I think that's bad.


That that that's bad juju to do when when you're Absolutely.


You're you're you're the one. But also as well, some people who do get triggered, you're right. They love being offended or they love taking offense on somebody's behalf. And and, actually, I've learned through bits of experience that I can't change them and I can't argue with them because they've got years of experience at this, and and they'll never ever change.


They're entrenched in that view. But you're also right as well that you're getting a reaction. And, actually, some of those people are some of the great people for the reach of your stuff because they get so angry that they wanna then rebroadcast and say, hey. Look what this guy's done.


Mhmm. That's brilliant. That's brilliant.


Or is it pay for that advertising.


Right?


You know, it's it's it's it's just great. So so I I I I I think with with, you you have to invoke a reaction with people, good or bad. I see comedians, Stuart, and they intentionally tread that line of of of acceptability.


Right.


And and, you know, whether whether you think it's funny or not, there's a bunch of other people who do think it's funny. So so my only suggestion is when people do get offenders, move some move on to someone else. Go and look at somebody else's stuff that's not gonna offend you. You know?


Yeah. Yeah. Because there's plenty of people that are enjoying it, and it's not hurting you if they're learning in this way. So one of the one of the criticisms that I have heard in the past is, keep it professional and and and criticizing something they call edutainment.


Well, if you can be entertained, I think you're gonna retain a lot more, than than if you are are just blankly staring at somebody who's showing you the those everlasting PowerPoints that I just I just get exhausted by.


I I I I agree. And and, one of my other careers I've had multiple careers. One of my other careers was a professional sports person. Right?


So I I I was lucky enough to be good enough to play, professional and semi professional soccer Okay. In in the UK, but soccer. So I was lucky enough to play with some really gifted professionals as well. And we worked as hard as anybody to better ourselves and better our craft, but we also had the most fun in the world as well.


And I think when somebody comes at me and says you have to be professional, I'm like, explain to me what that is. Mhmm. Does that mean using a certain vocabulary? Does that mean dress in a certain way?


Does that mean, coming into work at a certain time and going a certain time? Because all of those constraints all those constraints have been shown in the past to not only generate decent behaviors, but also generates very terrible behaviors as well. Right? You know, a a certain Austrian in Germany in nineteen thirty nine used all of those traits to to to to mobilize a terrible Yeah.


Approach to stuff, you know, the same as his Russian counterpart used all of those traits as well to so so they that stuff can be used for bad as well as for good. So if anybody says to me, oh, well, that's that's that's not professional enough for us or the language you're using isn't, you know, with our corporate image. I'm like, that's cool. Go go to somebody else who who is not gonna engage your staff Mhmm.


Who who is gonna match your corporate image and allows you to tick all the boxes you need to tick whilst your staff will still be caught out and disinterested in cybersecurity because I may say I might say a swear word Yeah. Once in a while Yeah. You know?


I think, when I run into that, that personality trait tends to be with people who lack confidence in themselves and their own abilities. They want to kind of hide in the, what's appropriate, patterns so that so that they won't be caught out as not knowing, you know, what they're doing or or not being capable. And so so sometimes it's it's just a matter of they they need to feel better about themselves. They need to gain their own confidence, and and that can be a difficult thing. Do you do you actually do, training in person to with with corporations, or is it typically online?


It it's so it has been online if we generate either the content library I've got, which is nearly fifty videos now. Yeah. Or and and it's kinda growing three or four a month.


Or or or doing bespoke videos for customers or or bespoke material for them where they'll say, hey. We've got, we've got a campaign coming up, and we'd like some some, some posters or some this or some that. So so I do that for them. However, the reason I did the stand up last year is so I could offer an alternative to the yearly Snooze Fest, which is, October's awareness month. Yeah.


And and it it was essentially to to have a stand up set. Mhmm. So about twenty, thirty minutes, and I'm I'm all I've all almost finished writing it, to have a stand up set where, I come and do that for them and then stick around and answer questions. And if it's a big enough organization, you know, we could do it two or three times in a day so everybody's covered.


But we we just have a bit of fun. Yeah. I asked them I asked them to heckle me, you know, and things like that where they can you know, and and we get involved in it. And I'm I've I'm writing it around the three p's, which are people, passwords, and phishing to kinda cover most of those bases.


You know? And and I talk about the the the terrible approaches of of, people being the weakest link, or or trying to make people the the last line of technology when they've spent millions on technology that hasn't worked, you know, or using people as scapegoats. And then talking about terrible passwords and terrible approaches to get people to change passwords and things like that, you know, and and things like you you you've seen the campaigns before. People put posters out.


You wouldn't share your underpants, so why would you share your password and things like that? And I'm I'm thinking to myself, what pervert to share an underpants?


Who who who just came up with this.


I you know, I mean, and not once have I ever looked at a friend and gone, would you like to change underpants? Would you, I've got a nice pair of Calvin Klein's on. Would you like to, it just doesn't happen.


So not a common occurrence.


I mean, I don't think it's common, but maybe there are people out there doing this, and you and I just don't know.


Maybe I went to the wrong bank account.


Maybe that's pretty much.


May maybe that's all it is. So so I've I've put that together or I'm putting it together to, to offer an alternative.


And then and then also, I am releasing an app as well probably towards the end of February that will have all my content on. And the idea is to build a supportive, cyber community around the content that people can use and show, outside the workplace to their family and friends. So it it'll be a it'll be a freemium version. So it'll be free for individuals, and they can download it as many times and give it to their kids to watch or or whatever.


Mhmm.


And and there'll be more stuff coming on. There'll be more Great. Podcasts and things like that coming on it.


And or if an organization wants to use it, then we can talk about what that license fee is per head for for them to use it internally.


So you already have a pretty hefty body of work out there. I mean, that makes it sound way more formal than it is. What do you have a favorite of the videos that you've put out so far?


It it's it's almost like having more than one kid, isn't it, when somebody says, who's your favorite? Or who's your favorite? I I I always do that when somebody says, I've got two kids. I say, who's your favorite? Yeah. There's gotta be one.


I've told my kids which my favorite is. It's usually who's cleaned the house for me recently. They know that.


Good. Absolutely. Absolutely. I was definitely my mom's favorite.


So, but, so, oh, do do I have I do.


Should I tell you my favorite?


Go on.


The the send up of the Rocky Horror, picture show, I couldn't stop laughing. I was in I mean, I my audit coordinator literally walked in and was like, are you what are you doing? You gotta see this guy.


So I love that one because it was just so good. And I love the one of you, on donkey back, you know, with the western accent and the guns because it was so bad. Like, it was painfully bad, and the accents were just horrible. And and it was wonderfully, wonderfully bad.


Which which, I'm I'm as you'll have seen from my videos, I'm I'm terrible at at accents. I'm terrible at acting and stuff like that. Right? And and that's not that's not a gift of me being really good at it and being really bad at it type of thing. I'm just bad at that stuff, and I'm okay with it.


Genuinely terrible.


I'm genuinely okay with it. And we'll we'll we'll talk about a new script with the team, and they'll go, right. We want you to do a Russian accent, and I'm like, you know I can't do accents. Right? And you want me to do another accent.


Yeah.


So and and they have loads of fun with it. And and I think my favorite to date, has been the Rocky Saebo one. Right?


Mhmm.


And only because I love Rocky. Right? But I love Mickey. I love Mickey in in the Rocky films.


You know? Just the and and he he used to say to him, hey, Rocky. Boom. You know?


And I just used to love and I got to say that on video.


The I I I don't think that's what he said, but I mean Yeah.


Yeah. Yeah. Yeah. So so so there's two characters I've I've loved playing, Mickey Uh-huh.


And Doc Emmett Brown in in the Martymint in the Back to the Future one. Oh oh. Because Yeah.


That was fantastic.


I I just love saying, well, put twenty one gigawatts.


You know, it's just it's it's great. And, they they they're the two I've really really enjoyed. And, but but I love doing all of them, and, actually, I I I don't tend to watch them back. That's the problem.


I love doing them, but I don't tend to watch them back. We were talking about this before we started recording. I'm ultra critical of myself. So when I watch it back or even when I watch this podcast back, I'll go, oh, I should have said that differently or I should have said that differently.


Yeah. And and I never wanna do another take on it, to be quite honest. I just let it go as as it is. You know?


So it's, yeah, those those have been my two favorites.


I've I've got a mister Bean one coming out, so I think you guys will see some mister Bean is is, Yeah.


Yeah.


One of my favorites. I but I have Yeah. In in my heart of hearts, I do have a fifteen year old boy's sense of humor. So I I think that's why mister Bean is a is just classic.


No. I I I I I as I say, when when we sit down and and we talk about the ideas and the scripts, we've also got an idea of a billionaires boys club type of approach where, where we choose, Bezos, Musk, Zuckerberg, Gates, Bang. We'll go along Bridget Branson will go along all of them, and we'll we'll have a security topic for each of them that's relevant to their success. Right?


Oh, uh-huh.


You know? So so, Bezos will be cloud. Musk will be how you can get data erased off the Internet of you looking like a fat balding teenager. Right? Mhmm.


You you know, Branson Branson will just be doing crazy stunts to to to raise his profile and how that can backfire and things like that. So we've got an idea of doing something like that where I don't even bother doing accents this time. I just use my Liverpool accent, and then I claim that these guys actually were born and grown up grew grew up in Liverpool, and that's a little known fact. You know?


So kinda play on that idiocy Sure. A a a little bit. So so we're looking at maybe doing that. And then you guys had Carl Sagan over there, right, as the scientist who explained everything.


We've got a chat called Brian Cox in in the UK, professor Brian Cox. And he does that type of stuff, and I'd love to do a parody of that on cybersecurity. So we explained science really well, and he's got a very gentle voice. And he comes from Manchester, and everything's brilliant, and he talks like that.


So I've got an idea to do something like that as well. But as an explainer and maybe even maybe even talk back to somebody like Netflix or Apple or stuff like that. You know?


That would be brilliant.


I think that would be cool.


I'm excited to see what you have coming up for this year because, everything you put out in the past, very entertaining, but also, educational. It helps people understand the the the cybersecurity, topics that are sometimes you start talking to people about, cybersecurity and then they just kind of blank out because it's it's not fun. But you bring the entertainment part into it, and it and it really makes it so, it's engaging. It's and and the information gets in there, and and I just love that about what you have.


And and the idea is that that's not a panacea. Right? The idea is that's one one thing in your arsenal of Sure. Awareness tools.


Right? You know? So I'm not saying just do this and don't do know before or proof point or FinSecurity or stuff like that. You know?


I'm not saying any of that. But I am saying if you wanna engage your people and get them get them involved in security rather than having to force them to do it. Sure. It's easier to do it if you give them something worth their time and their attention.


Because attention spans are short, and that's why I keep the videos between one and five minutes Mhmm.


In in length. So so we're not we're we're not expecting too much of our people because if I I I I said earlier on about, using using them as technology or the last line. I I I disagree with that. However, if you if you train them well and give them something that is interest, you don't have to ask them to be your last line of technology.


They're they're at the forefront of all of this without without them being asked at all. You know?


Yeah. I I I agree with you what you're saying about, putting that pressure even on or the expectation that people will be your last line of defense. We have plenty of technology to really back people up. And and, if there are any processes in an organization that allows one person to, bank transfer six million dollars to, you know, somebody that that they think is the CEO.


There's there are processes that need to be addressed and not just the individual's knowledge. And, yes, it's great to have knowledge of people. It's great to build that understanding. It's great to give that to them so that they could protect themselves from these, ever increasing phishing campaigns at their homes, in their in their in their home email, their home, phone, you know, whatever they're they're dealing with outside of the office is good knowledge to have. But relying on it as your last line of defense, I think is, I think is unrealistic.


Be be because we are we are stupid carbon based life forms. Right? And I don't say that to be disparaging. I include myself in that.


We are all life based carbon life based forms, right, where where we will all fall foul of a scam and an attack. Because anthropologically, we are built to trust and help. And that's how you build societies, and that's how you build friendships and relationships and blah blah blah. And so so you're gonna get people who will look for the angle in it.


You're gonna get people who will trick other people. And and and I think we have to we have to realize that that with any with any process, you know, the old people process technology triads, with any of that, yes, the people will always be, a a point of entry. And and that's where people say that they'll be the weakest link, and I disagree with that. There'll always be a point of entry.


I like how you should get You you know, the the the other two of the important bits Yeah.


That so many so many organizations focus all their effort, money, time, and resources in, and largely get it wrong every single you you do all the tabs and all that's in my past. I've never gone I've never come out of an audit and gone, Dave and accounts is rubbish. Get rid of them. I've always come out of an audit.


Oh, yeah.


That's terrible.


I've I've always come out of an audit to turn around and say, hey. That process around that or that technology thing around that is not what or that, you know, I I may turn around and say that the way you train your staff is not often enough for us to is not inclusive enough. And not not once do I ever point the finger at at those people, you know.


So Yeah.


I I've heard, things like, oh, well, Joey so and so, gave his password to someone because he got phished. Really? Well, why did he also give him his second factor?


Yeah. Like, why aren't why didn't you have multifactor authentication in place? Why what what other if if all it takes to get into your organization is one given up password, then then the technologies are not in place that need to be in place.


Okay. There's there's much, much worse with your organization than Joey giving away his password.


Right? Yeah. Poor Joey.


Although Joey although Joey always does that, by the way.


Well, you know, if he would buy his round, I think it would be in his favor, but, I mean, jury's out on Joey.


Before we we wrap up this call, it's just been a delight. Is there anything else that you wanted to to share with the the audience or anything coming up, with the CyberHawk or yourself?


I've I've I've mentioned about the app coming out at at the end of, at at the end of February. I've I've got I've I've got something coming out which is gonna be cool, and and it's gonna be a podcast that somebody else is putting together, but I'm gonna be a regular presenter on it.


And and it's it's with a guy in the UK who's who's making his way in stand up. He's he's much further on than than I am, and and he's known by quite a few people as well. And he's been on TV for it. So I'm really looking forward to that.


That's that's gonna be exciting. That's just and and then, also, I'm I'm excited to to get the script finished and and test it with a few people and and see see if they find it funny enough to then pay money for it. Right? So, I I I just love being in front of people and and them smiling and them, kind of getting something out of what I'm saying to them.


You know?


So Right.


So they they they they did a kinda cool things. Look. Last year was a blast for me even though it was in COVID times, and I know, you know, everybody's had their own story in COVID, but it was a blast for me seeing Cyberhoff grow from an idea into into generating revenue.


Mhmm.


And hopefully, next year, it will or this year rather. Hopefully, this year, it'll take a next step again where we'll get we'll get better with our content. We'll get better with the scripts. We'll get better with the production. We'll get better with all of that stuff. And then I'll I'll do the other stuff that, you know, lots more people are asking me to come on their podcast. So people are asking me to come and talk to their teams, and and and that's cool because as you can tell from this podcast, I love the sound of my own voice.


Is it Is it alright. Where where is the best place that people can find you so they can hear more of that voice?


Find me on LinkedIn, Ian Ian Murphy on LinkedIn.


My picture is as as a red curtain behind it. That was my first stand up gig, so that that was a picture of that. You can find me, going to cyber off dot co dot u k. So Great.


That's cyber and off. Think of a swear word and then off and then dot co dot u k. Okay. It it it's it's it's actually how I come up with the name.


I know it's childish. I know it's childish. It's perfect. Get fed up with people using cyber to make themselves sound windswept and interesting.


Yeah.


And I really think it I really think it was techy geeks in our industry who thought if they called themselves cyber security that they may have a chance to get laid, and and that just has to be true.


It's just not.


Well, we'll make sure we put those links in in in, on our web page with the the podcast. I would love for people to get connected with you. I'm personally super excited to see this this app that you have coming out. And, I I hope to see you in person one day on the stage. And and, thank you so much for coming and talking to me.


Jen, thanks so much for having me on. It's been a blast. I really enjoyed it.


Alright. Take care. Thanks again for joining me for this very first episode of season three. I loved it.


I I think that our guest was just absolutely, a a breath of fresh air in terms of of, security training and awareness. Please go and check out, I'll have the links in the show notes and and get connected with him on LinkedIn. Find where his new, app app is because I think you're gonna find a lot of value in it. Please join me again for our next, episode.


I, I mean, I have so many great guests lined up. I can't list them all. It's mostly because I forget. But you're gonna like them, and I'll talk to you again later.


Bye.


Thanks for watching. To watch more episodes of SecurityMetrics podcast, click on the box on the left. If you prefer to listen to this podcast, it's available on all your favorite podcast platforms. See you on the slopes.

Get the Guide To PCI Compliance
Download
Get Quote for PCI Training
Request a Quote