4a:I[79285,["9954","static/chunks/4ee4ee27-398dcd472461c2ef.js?dpl=dpl_7QHk9f14e98dEPfDevgFuV4YcZQr","7927","static/chunks/9a74773d-16e131c175d2b3ff.js?dpl=dpl_7QHk9f14e98dEPfDevgFuV4YcZQr","5288","static/chunks/7ad754e0-ffea7af6205a2f60.js?dpl=dpl_7QHk9f14e98dEPfDevgFuV4YcZQr","2053","static/chunks/2053-f00154f9c3476f5f.js?dpl=dpl_7QHk9f14e98dEPfDevgFuV4YcZQr","1388","static/chunks/1388-80281e678c042408.js?dpl=dpl_7QHk9f14e98dEPfDevgFuV4YcZQr","8514","static/chunks/8514-7811f1686fde477d.js?dpl=dpl_7QHk9f14e98dEPfDevgFuV4YcZQr","6890","static/chunks/6890-2c2b674577c0eebb.js?dpl=dpl_7QHk9f14e98dEPfDevgFuV4YcZQr","2261","static/chunks/2261-e373a1127885184d.js?dpl=dpl_7QHk9f14e98dEPfDevgFuV4YcZQr","6055","static/chunks/6055-6211967fc7928d7b.js?dpl=dpl_7QHk9f14e98dEPfDevgFuV4YcZQr","7575","static/chunks/7575-242f7e2f787ef8c3.js?dpl=dpl_7QHk9f14e98dEPfDevgFuV4YcZQr","9527","static/chunks/9527-01d7046a2c9f71ed.js?dpl=dpl_7QHk9f14e98dEPfDevgFuV4YcZQr","2976","static/chunks/2976-df65ee5c6014c392.js?dpl=dpl_7QHk9f14e98dEPfDevgFuV4YcZQr","5586","static/chunks/5586-6983fba7f572b117.js?dpl=dpl_7QHk9f14e98dEPfDevgFuV4YcZQr","2197","static/chunks/2197-15d6dcafadb1c755.js?dpl=dpl_7QHk9f14e98dEPfDevgFuV4YcZQr","6821","static/chunks/6821-5c3a0688cd9968ef.js?dpl=dpl_7QHk9f14e98dEPfDevgFuV4YcZQr","1028","static/chunks/1028-8be837afab7664cb.js?dpl=dpl_7QHk9f14e98dEPfDevgFuV4YcZQr","1252","static/chunks/1252-db503956c258e553.js?dpl=dpl_7QHk9f14e98dEPfDevgFuV4YcZQr","6187","static/chunks/6187-64d0d87f1962b0cb.js?dpl=dpl_7QHk9f14e98dEPfDevgFuV4YcZQr","1617","static/chunks/1617-00c6ac3b34edd119.js?dpl=dpl_7QHk9f14e98dEPfDevgFuV4YcZQr","1308","static/chunks/1308-d68bed2b2e6a3147.js?dpl=dpl_7QHk9f14e98dEPfDevgFuV4YcZQr","1812","static/chunks/1812-c048a592615c9fef.js?dpl=dpl_7QHk9f14e98dEPfDevgFuV4YcZQr","9271","static/chunks/9271-f4b4a8f8d92b865d.js?dpl=dpl_7QHk9f14e98dEPfDevgFuV4YcZQr","206","static/chunks/206-f94d4047cd1ae4b1.js?dpl=dpl_7QHk9f14e98dEPfDevgFuV4YcZQr","6812","static/chunks/6812-51af4e0c942f90f5.js?dpl=dpl_7QHk9f14e98dEPfDevgFuV4YcZQr","2235","static/chunks/2235-691da4af47d2bcc3.js?dpl=dpl_7QHk9f14e98dEPfDevgFuV4YcZQr","5246","static/chunks/5246-8e7a9dd93159226f.js?dpl=dpl_7QHk9f14e98dEPfDevgFuV4YcZQr","9884","static/chunks/9884-61ba4289c51a4f59.js?dpl=dpl_7QHk9f14e98dEPfDevgFuV4YcZQr","6621","static/chunks/6621-57ae6ffd41f6e4c8.js?dpl=dpl_7QHk9f14e98dEPfDevgFuV4YcZQr","5780","static/chunks/app/%5BtenantId%5D/(primary-site)/page-24e146d2e9cd1fb6.js?dpl=dpl_7QHk9f14e98dEPfDevgFuV4YcZQr"],"Feed"] 4b:Tbb6,European Cyber Security Month - Feedback loops @channel Last week, we talked about the importance of a full Communications Plan for your Security Awareness Month. After all, security programmes are built to push messages out - training, education, policy updates. What we may not be so good at is listening 🙉. That imbalance sits at the centre of security culture work: we measure click rates and completion percentages and call it engagement, but true engagement isn't one-directional 🔃. If we want people to believe security is done with them, not to them, we have to value listening as much as broadcasting. Consider the difference between two scenarios: 1. A mandatory module is pushed to all staff telling them about a new process or policy; 2. A question is issued to all staff - “what gets in your way when you try to report a security concern?” Only the second suggests their experience matters enough to shape what happens next. Employees don't conclude “security cares about us” because of a well-produced campaign; they conclude it because, at some point, they said something was broken and we fixed it ✅. Without that loop, even the best-designed awareness content reads as friction from someone who doesn't care 🤷‍♂️. The trouble is, one channel can't do this job. 👩‍💼Executives rarely respond to a survey - listening to them means being in the room; 🧑‍🏭 Operational staff live with legacy technologies that resist changes, so we need to walk the floor, not just email a policy; and 🧑‍💼Office workers leave a trail in help desk tickets and everyday grumbling about workplace process frictions that quietly drive workarounds. Treating all three as one audience is how we lose the connection, and the trust, we're trying to build. Collecting feedback is the easy part. What changes behaviour and creates culture is visibly acting on it. A control adjusted because the factory floor flagged it as unworkable, or a reporting process simplified because people kept giving up halfway through - these are the moments that convert feedback into evidence of care. A feedback loop that goes nowhere is worse than none at all ⏯️- it teaches people not to bother. If users don't get a valid, personalised response to every suspicious email they report, they'll simply stop. Security culture isn't something a campaign announces into existence. It accumulates as the residue of hundreds of small moments where the organisation either responded to what people told it, or didn't. The key question isn't how to communicate security better - it's how well we listen, and what we're prepared to change because of what we hear 👂. So, during Security Awareness Month, capture the voices, feedback and complaints from each person, and record who said what. Investigate, and circle back with personalised responses and explanations. We may not fix everything, but if people understand how, why and when, that's the basis for trust 🫶.4c:Tc44,*European Cyber Security Month - Feedback loops* Last week, we talked about the importance of a full Communications Plan for your Security Awareness Month. After all, security programmes are built to push messages out - training, education, policy updates. What we may not be so good at is *listening* :hear_no_evil:. That imbalance sits at the centre of security culture work: we measure click rates and completion percentages and call it engagement, but true engagement isn't one-directional :arrows_clockwise:. If we want people to believe security is done with them, not to them, we have to value listening as much as broadcasting. Consider the difference between two scenarios: 1. A mandatory module is pushed to all staff telling them about a new process or policy; 2. A question is issued to all staff - “_what gets in your way when you try to report a security concern?_” Only the second suggests their experience matters enough to shape what happens next. Employees don't conclude “security cares about us” because of a well-produced campaign; they conclude it because, at some point, they said something was broken and we fixed it :white_check_mark:. Without that loop, even the best-designed awareness content reads as friction from someone who doesn't care :man-shrugging:. The trouble is, one channel can't do this job. :female-office-worker:*Executives* rarely respond to a survey - listening to them means being in the room; :factory_worker: *Operational* *staff* live with legacy technologies that resist changes, so we need to walk the floor, not just email a policy; and :office_worker:*Office* *workers* leave a trail in help desk tickets and everyday grumbling about workplace process frictions that quietly drive workarounds. Treating all three as one audience is how we lose the connection, and the trust, we're trying to build. Collecting feedback is the easy part. What changes behaviour and creates culture is visibly *acting* on it. A control adjusted because the factory floor flagged it as unworkable, or a reporting process simplified because people kept giving up halfway through - these are the moments that convert feedback into *evidence of care*. A feedback loop that goes nowhere is worse than none at all :black_right_pointing_triangle_with_double_vertical_bar:- it teaches people not to bother. If users don't get a valid, personalised response to every suspicious email they report, they'll simply stop. Security culture isn't something a campaign announces into existence. It accumulates as the residue of hundreds of small moments where the organisation either responded to what people told it, or didn't. The key question isn't how to communicate security better - it's how well we listen, and what we're prepared to change because of what we hear :ear:. So, during Security Awareness Month, capture the voices, feedback and complaints from each person, and record who said what. Investigate, and circle back with personalised responses and explanations. We may not fix everything, but if people understand how, why and when, that's the basis for trust :heart_hands:.4d:T68e,Signal 2026 is coming! Signal Security Summit _ Master Slides (1) On November 18, 2026, the security community comes together in Cologne for Signal Security Summit, SoSafe’s flagship event bringing together security leaders and practitioners to explore the human factor in cybersecurity. Expect a full day of keynotes, customer stories, masterclasses and conversations around AI, cyber resilience, security culture, human risk and more, with 50+ speakers across 5 stages. 📍 Die Halle Tor 2, Cologne 📅 November 18, 2026 Not registered yet? Secure your spot for Signal 2026: 👉 Register for Signal 2026 Connect before, during and after Signal Signal is about more than what happens on stage. It’s about the conversations, experiences and connections you take away from the day - and continue afterwards. That’s why we’ve created the Signal 2026 space here in the SoSafe Community. This is where you can get connected with other attendees and security professionals, exchange perspectives ahead of the event, and stay part of the conversation beyond November 18. Over the coming weeks, we’ll share: Opportunities to connect with peers and find people with similar interests and challenges What to expect at Signal and how to make the most of your day Conversations and topics from the event - before, during and after Signal Ways to get involved and meet fellow Community members onsite A few surprises along the way Think of this space as your digital home for the Signal experience - a place to connect before we meet in Cologne and keep the conversations going afterwards. Follow the Signal 2026 space and join the conversation. See you at Signal. 👋4e:T7ca,Discover the new Community Hub for Signal 2026 Signal 2026 is coming! Signal Security Summit _ Master Slides (1) On *November 18, 2026*, the security community comes together in Cologne for *Signal Security Summit*, SoSafe’s flagship event bringing together security leaders and practitioners to explore the human factor in cybersecurity. Expect a full day of keynotes, customer stories, masterclasses and conversations around *AI, cyber resilience, security culture, human risk and more*, with *50+ speakers across 5 stages*. :round_pushpin: *Die Halle Tor 2, Cologne* :date: *November 18, 2026* > Not registered yet? Secure your spot for Signal 2026: > :point_right: Connect before, during and after Signal Signal is about more than what happens on stage. It’s about the conversations, experiences and connections you take away from the day - and continue afterwards. That’s why we’ve created the *Signal 2026 space here in the SoSafe Community*. This is where you can get connected with other attendees and security professionals, exchange perspectives ahead of the event, and stay part of the conversation beyond November 18. Over the coming weeks, we’ll share: • *Opportunities to connect with peers* and find people with similar interests and challenges • *What to expect at Signal* and how to make the most of your day • *Conversations and topics from the event* - before, during and after Signal • *Ways to get involved* and meet fellow Community members onsite • A few *surprises along the way* Think of this space as your *digital home for the Signal experience* - a place to connect before we meet in Cologne and keep the conversations going afterwards. Follow the Signal 2026 space and join the conversation. See you at Signal. :wave: _Posted from the _4f:T938,European Cyber Security Month - Planning The Delivery @channel October is nearly here! It’s the pinnacle moment in many of our programmes, when we get permission to push our message harder than ever across Security Awareness Month. Over the next 3 weeks, I’ll pop in with tips, reminders and tools to help you be as prepared as you can be for the coming month. In this first episode, I want to focus on three things: 1. 📉 Before you start this journey, it’s important that you’ve assessed your cultural maturity and the risks it points to. Decide which behaviours need to change, what ‘better’ looks like, and which teams need the most attention. If you haven’t done this already, loop back and do it NOW to give yourself a foundation for what comes next. 2. 🎯 SoSafe has already built a set of content for you: sosafe-awareness.com/ecsm-2026 (https://sosafe-awareness.com/ecsm-2026/). It has four weeks of awareness content covering Phishing, Voice Scams, Shadow AI and Deepfakes. If these topics overlap with your key messages, feel free to use this content. 3. 📣 Free content is great, but it’s only half the solution – you need a solid communications plan to drive your messaging and interactions. Following on from last week’s ‘Off The Hook’ PPT, I’ve created a Communications Plan template, pre-populated with some example content. The plan will drive clarity about what you are trying to achieve. Most of the columns are self-explanatory but a few deserve some explanation: • BJ Fogg Focus - Highlights the specific behaviour-change lever that you are using in that scenario – try to ensure you cover all three for each topic! • Mouthpiece - Separates content from delivery - we know that other voices often carry more credibility than the CISO, so choose deliberately for maximum impact • Associated policy - Gives you a place to record which policy covers this message, aiding in any subsequent Q&A with staff. • Tests - Freeform column to record ideas for metrics that validate scope and impact of your communication. Useful to prove value when we get to November. Take the template and adapt it to your needs. I’d love to know which columns work for you, which don’t, and what you add. One thing’s certain: don’t head into October without a clear plan for every communication activity.50:T96a,*European Cyber Security Month - Planning The Delivery* October is nearly here! It’s the pinnacle moment in many of our programmes, when we get permission to push our message harder than ever across Security Awareness Month. Over the next 3 weeks, I’ll pop in with tips, reminders and tools to help you be as prepared as you can be for the coming month. In this first episode, I want to focus on three things: 1. :chart_with_downwards_trend: Before you start this journey, it’s important that you’ve assessed your *cultural maturity* and the risks it points to. Decide which behaviours need to change, what ‘better’ looks like, and which teams need the most attention. If you haven’t done this already, loop back and do it NOW to give yourself a foundation for what comes next. 2. :dart: SoSafe has already built a set of *content* for you: . It has four weeks of awareness content covering Phishing, Voice Scams, Shadow AI and Deepfakes. If these topics overlap with your key messages, feel free to use this content. 3. :mega: Free content is great, but it’s only half the solution – you need a solid *communications plan* to drive your messaging and interactions. Following on from last week’s ‘Off The Hook’ PPT, I’ve created a *Communications Plan template*, pre-populated with some example content. The plan will drive clarity about what you are trying to achieve. Most of the columns are self-explanatory but a few deserve some explanation: • *BJ Fogg Focus* - Highlights the specific behaviour-change lever that you are using in that scenario – try to ensure you cover all three for each topic! • *Mouthpiece* - Separates content from delivery - we know that other voices often carry more credibility than the CISO, so choose deliberately for maximum impact • *Associated policy* - Gives you a place to record which policy covers this message, aiding in any subsequent Q&A with staff. • *Tests* - Freeform column to record ideas for metrics that validate scope and impact of your communication. Useful to prove value when we get to November. Take the template and adapt it to your needs. I’d love to know which columns work for you, which don’t, and what you add. One thing’s certain: don’t head into October without a clear plan for every communication activity.51:Tb2c,Off the Hook – Phone addiction and Meta’s legal settlement @channel As our summer breaks start to end, many of us have had a front-row seat to something that’s been hard to ignore: our family’s, and our own, relationship with social media/phones 📱. The unstructured days of the school holidays 🏖️ strip away routines that normally keep phone use in check, and for many households the result has been a summer of near-constant scrolling, gaming, and notification-chasing. Whether it was watching a teenager disappear into TikTok for hours, or catching yourself reaching for your phone when there's a lull in conversation, the pattern is familiar: apps engineered to be irresistible, delivering just enough reward to keep us coming back 📲. Interestingly, this isn't simply a matter of willpower. This same topic has been the subject of serious legal scrutiny in the US. You may know that Meta ♾️ recently agreed a landmark settlement (https://www.bbc.co.uk/news/articles/cd68q3wynnqo) worth around $18 billion, resolving claims that it knowingly designed Facebook and Instagram to be addictive, and that they misrepresented the harm this caused to children's mental health (https://www.psychologytoday.com/us/blog/psychology-through-technology/202512/why-is-social-media-harmful-to-children-and-teens). As part of the deal, Meta committed to daily usage limits and "nighttime blocks" for teenage users, stronger age-verification measures, and new tools to help parents manage their children's use of its platforms. Although they deny any wrongdoing, these changes are an acknowledgment that social media products need guardrails & regulation, not just goodwill & best endeavours. This is a useful reminder for us all: if the platforms themselves are being required to build in friction and limits, there's a strong case for doing the same at home*. If this is a topic you think your user base could be interested in, I have good news 🥳! This week, I’ve created a handout that you can use to within your own organisations. The handout, ‘Off the Hook’, sets out six practical steps to help you and your family regain control over phone habits as the new school year begins. The goal isn't to demonise technology, but to try to break the automatic reflexes, and to do it as a household, with everyone's buy-in. Feel free to brand, revise and utilise this handout if you think it could be of value, either in parallel to communication about the Meta court case, or as part of your plans for October’s awareness month. * interestingly, in ‘Careless People’ (a book written about Meta by an internal whistleblower) it was highlighted that senior members of the Meta leadership team were very strict about their own children having no, or very limited, access to social media platforms… make of that what you will…🤨52:Tb78,*Off the Hook – Phone addiction and Meta’s legal settlement* As our summer breaks start to end, many of us have had a front-row seat to something that’s been hard to ignore: our family’s, and our own, relationship with social media/phones :iphone:. The unstructured days of the school holidays :beach_with_umbrella: strip away routines that normally keep phone use in check, and for many households the result has been a summer of near-constant scrolling, gaming, and notification-chasing. Whether it was watching a teenager disappear into TikTok for hours, or catching yourself reaching for your phone when there's a lull in conversation, the pattern is familiar: apps engineered to be irresistible, delivering just enough reward to keep us coming back :calling:. Interestingly, this isn't simply a matter of willpower. This same topic has been the subject of serious legal scrutiny in the US. You may know that Meta :infinity: recently agreed a worth around $18 billion, resolving claims that it knowingly designed Facebook and Instagram to be addictive, and that they misrepresented the harm this caused to children's . As part of the deal, Meta committed to daily usage limits and "nighttime blocks" for teenage users, stronger age-verification measures, and new tools to help parents manage their children's use of its platforms. Although they deny any wrongdoing, these changes are an acknowledgment that social media products need guardrails & regulation, not just goodwill & best endeavours. This is a useful reminder for us all: if the platforms themselves are being required to build in friction and limits, there's a strong case for doing the same at home*. If this is a topic you think your user base could be interested in, I have good news :partying_face:! This week, I’ve created a *handout* that you can use to within your own organisations. The handout, ‘Off the Hook’, sets out six practical steps to help you and your family regain control over phone habits as the new school year begins. The goal isn't to demonise technology, but to try to break the automatic reflexes, and to do it as a household, with everyone's buy-in. Feel free to brand, revise and utilise this handout if you think it could be of value, either in parallel to communication about the Meta court case, or as part of your plans for October’s awareness month. _* interestingly, in ‘Careless People’ (a book written about Meta by an internal whistleblower) it was highlighted that senior members of the Meta leadership team were very strict about their own children having no, or very limited, access to social media platforms… make of that what you will…_:face_with_raised_eyebrow:53:Tbd5,Trust Me, I'm From IT! @channel In preparation for my session at SoSafe Academy earlier this week, I was creating content about how to establish trust between the CISO and the Board. It made me ponder the benefits of trust on a wider scale. It’s an awkward truth, but the IT team is often the least trusted voice in the building👨‍💻. They show up uninvited, tell people they're doing it wrong, disrupt working flow, and then vanish leaving staff confused and irritated. That’s an issue in itself, but what’s worse is that Security is often perceived as just another part of IT! Is it any wonder therefore, that our messages struggle to get through? 🙉 Trust is a mental shortcut our brains use to decide who's worth listening to under pressure, and who’s opinions have value. We judge advice by how we feel about the messenger, not simply the merits of the message. This technique is used by attackers all the time - look at the 2023 MGM Resorts breach for example. Attackers didn't crack any encryption - they simply rang the IT help desk, sounded confident, and asked for a password reset. The help desk trusted the caller's tone and basic authentication over any advanced verification process. That's authority bias, social proof & years of training a ‘help desk’ to help, working exactly as evolution intended, just weaponised against us. If attackers can build trust in five minutes on the phone, we can surely build genuine trust with our own colleagues. So how can we build trust with our user base instead? Three behavioural levers: • 🔄 Reciprocity - always be looking to help. I used to tell my team that the answer to any user request was always “Yes”, we just needed to figure out how to say yes safely. Look for opportunities to add value and make the users life easier. Once you are perceived to be ‘on their side’, things will get much easier. • 📶 Consistency - as German (& British!) rail commuters know, it’s difficult to trust a service that is inconsistent. By always having the same helpful response, by showing up every time, by always being calm, regardless of cause, you will become much more approachable to staff. Which leads onto… • 🆘 Psychological safety - remove the risk, blame and finger pointing from any engagement. Reward the person who reports "I think I clicked something," fast, publicly, and warmly. That single cultural signal does more for security than any awareness poster you can print. Trust isn't earned through authority; it's earned through repeated, low-stakes proof that we're on the user’s side. It will spread slowly, user by user, as each one encounters a reason to trust you, so be the colleague who always helps, not the department that judges — and watch engagement follow. Talking Points 1. Do you have any metric tracking trust levels? If so, what does that look like? 2. What’s the one thing your department has done that made the biggest difference to how much the user base trust the Security function?54:Tc1d,*Trust Me, I'm From IT!* In preparation for my session at SoSafe Academy earlier this week, I was creating content about how to establish trust between the CISO and the Board. It made me ponder the benefits of trust on a wider scale. It’s an awkward truth, but the IT team is often the least trusted voice in the building:male-technologist:. They show up uninvited, tell people they're doing it wrong, disrupt working flow, and then vanish leaving staff confused and irritated. That’s an issue in itself, but what’s worse is that Security is often perceived as just another part of IT! Is it any wonder therefore, that our messages struggle to get through? :hear_no_evil: Trust is a mental shortcut our brains use to decide who's worth listening to under pressure, and who’s opinions have value. We judge advice by how we feel about the messenger, not simply the merits of the message. This technique is used by attackers all the time - look at the 2023 MGM Resorts breach for example. Attackers didn't crack any encryption - they simply rang the IT help desk, sounded confident, and asked for a password reset. The help desk trusted the caller's tone and basic authentication over any advanced verification process. That's authority bias, social proof & years of training a ‘help desk’ to help, working exactly as evolution intended, just weaponised against us. If attackers can build trust in five minutes on the phone, we can surely build genuine trust with our own colleagues. So how can we build trust with our user base instead? Three behavioural levers: • :arrows_counterclockwise: *Reciprocity -* always be looking to help. I used to tell my team that the answer to any user request was always “Yes”, we just needed to figure out how to say yes safely. Look for opportunities to add value and make the users life easier. Once you are perceived to be ‘on their side’, things will get much easier. • :signal_strength: *Consistency -* as German (& British!) rail commuters know, it’s difficult to trust a service that is inconsistent. By always having the same helpful response, by showing up every time, by always being calm, regardless of cause, you will become much more approachable to staff. Which leads onto… • :sos: *Psychological safety -* remove the risk, blame and finger pointing from any engagement. Reward the person who reports "I think I clicked something," fast, publicly, and warmly. That single cultural signal does more for security than any awareness poster you can print. Trust isn't earned through authority; it's earned through repeated, low-stakes proof that we're on the user’s side. It will spread slowly, user by user, as each one encounters a reason to trust you, so be the colleague who always helps, not the department that judges — and watch engagement follow. *Talking Points* 1. Do you have any metric tracking trust levels? If so, what does that look like? 2. What’s the one thing your department has done that made the biggest difference to how much the user base trust the Security function?1f:["$","$L4a",null,{"tenantId":"b5e803d8-7371-4f29-94df-f17132b738a9","feedIdOrName":"home","defaultFeedPostUiFormat":"snippet","defaultSortMethod":"newest","defaultPageSize":10,"fallbackData":{"page":0,"pageSize":10,"records":[{"id":"5umuidckcumx","message_id":"msg_Kq7H77wpkTby","created_at":"2026-09-15T07:45:04.884406+00:00","content_created_at":"2026-09-15T07:45:01.289+00:00","latest_activity_at":"2026-09-15T07:45:01.289+00:00","title":"Creating Effective Feedback Loops for Stronger Security Culture During Awareness Month","slug":"creating-effective-feedback-loops-for-stronger-sec","description":"Effective security culture requires two-way communication and acting on employee feedback during Security Awareness Month to build trust and engage...","feed_id":"6ed890b7-4027-4dcc-93a0-0c4a367f22bf","post_detail_display_format":"discussion","author_profile_id":"93fdaeb1-4ea5-4afe-8ed2-72cfe4ee026d","body_prosemirror":{"type":"doc","content":[{"type":"paragraph","content":[{"text":"European Cyber Security Month - Feedback loops","type":"text","marks":[{"type":"bold"}]}]},{"type":"paragraph","content":[{"text":"@channel","type":"text"},{"text":" Last week, we talked about the importance of a full Communications Plan for your Security Awareness Month. After all, security programmes are built to push messages out - training, education, policy updates. What we may not be so good at is ","type":"text"},{"text":"listening ","type":"text","marks":[{"type":"bold"}]},{"text":"🙉","type":"text"},{"text":".","type":"text"}]},{"type":"paragraph","content":[{"text":"That imbalance sits at the centre of security culture work: we measure click rates and completion percentages and call it engagement, but true engagement isn't one-directional ","type":"text"},{"text":"🔃","type":"text"},{"text":". If we want people to believe security is done with them, not to them, we have to value listening as much as broadcasting.","type":"text"}]},{"type":"paragraph","content":[{"text":"Consider the difference between two scenarios:","type":"text"}]},{"type":"orderedList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":" A mandatory module is pushed to all staff telling them about a new process or policy;","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":" A question is issued to all staff - “","type":"text"},{"text":"what gets in your way when you try to report a security concern?","type":"text","marks":[{"type":"italic"}]},{"text":"”","type":"text"}]}]}]},{"type":"paragraph","content":[{"type":"hardBreak"},{"text":"Only the second suggests their experience matters enough to shape what happens next. Employees don't conclude “security cares about us” because of a well-produced campaign; they conclude it because, at some point, they said something was broken and we fixed it ","type":"text"},{"text":"✅","type":"text"},{"text":". Without that loop, even the best-designed awareness content reads as friction from someone who doesn't care ","type":"text"},{"text":"🤷‍♂️","type":"text"},{"text":".","type":"text"}]},{"type":"paragraph","content":[{"text":"The trouble is, one channel can't do this job. ","type":"text"},{"text":"👩‍💼","type":"text"},{"text":"Executives","type":"text","marks":[{"type":"bold"}]},{"text":" rarely respond to a survey - listening to them means being in the room; ","type":"text"},{"text":"🧑‍🏭","type":"text"},{"text":" Operational","type":"text","marks":[{"type":"bold"}]},{"text":" ","type":"text"},{"text":"staff","type":"text","marks":[{"type":"bold"}]},{"text":" live with legacy technologies that resist changes, so we need to walk the floor, not just email a policy; and ","type":"text"},{"text":"🧑‍💼","type":"text"},{"text":"Office","type":"text","marks":[{"type":"bold"}]},{"text":" ","type":"text"},{"text":"workers","type":"text","marks":[{"type":"bold"}]},{"text":" leave a trail in help desk tickets and everyday grumbling about workplace process frictions that quietly drive workarounds. Treating all three as one audience is how we lose the connection, and the trust, we're trying to build.","type":"text"}]},{"type":"paragraph","content":[{"text":"Collecting feedback is the easy part. What changes behaviour and creates culture is visibly ","type":"text"},{"text":"acting","type":"text","marks":[{"type":"bold"}]},{"text":" on it. A control adjusted because the factory floor flagged it as unworkable, or a reporting process simplified because people kept giving up halfway through - these are the moments that convert feedback into ","type":"text"},{"text":"evidence of care","type":"text","marks":[{"type":"bold"}]},{"text":".","type":"text"},{"type":"hardBreak"},{"text":"A feedback loop that goes nowhere is worse than none at all ","type":"text"},{"text":"⏯️","type":"text"},{"text":"- it teaches people not to bother. If users don't get a valid, personalised response to every suspicious email they report, they'll simply stop.","type":"text"}]},{"type":"paragraph","content":[{"text":"Security culture isn't something a campaign announces into existence. It accumulates as the residue of hundreds of small moments where the organisation either responded to what people told it, or didn't. The key question isn't how to communicate security better - it's how well we listen, and what we're prepared to change because of what we hear ","type":"text"},{"text":"👂","type":"text"},{"text":".","type":"text"}]},{"type":"paragraph","content":[{"text":"So, during Security Awareness Month, capture the voices, feedback and complaints from each person, and record who said what. Investigate, and circle back with personalised responses and explanations. We may not fix everything, but if people understand how, why and when, that's the basis for trust ","type":"text"},{"text":"🫶","type":"text"},{"text":".","type":"text"}]}]},"body_plaintext":"$4b","source":"slack","edited_at":null,"version":0,"is_published":true,"file_attachments_count":1,"reactions_count":0,"comments_count":0,"slack_message":{"id":"c0ea6816-4a73-4c31-af83-bb65ce06da6f","message_ts":"1789458301.289819","blocks":[{"type":"rich_text","block_id":"EN43D","elements":[{"type":"rich_text_section","elements":[{"text":"European Cyber Security Month - Feedback loops","type":"text","style":{"bold":true}},{"text":"\n\n","type":"text"},{"type":"broadcast","range":"channel"},{"text":" Last week, we talked about the importance of a full Communications Plan for your Security Awareness Month. After all, security programmes are built to push messages out - training, education, policy updates. What we may not be so good at is ","type":"text"},{"text":"listening ","type":"text","style":{"bold":true}},{"name":"hear_no_evil","type":"emoji","style":{"bold":true},"unicode":"1f649"},{"text":".\n\nThat imbalance sits at the centre of security culture work: we measure click rates and completion percentages and call it engagement, but true engagement isn't one-directional ","type":"text"},{"name":"arrows_clockwise","type":"emoji","unicode":"1f503"},{"text":". If we want people to believe security is done with them, not to them, we have to value listening as much as broadcasting.\n\nConsider the difference between two scenarios:\n","type":"text"}]},{"type":"rich_text_list","style":"ordered","border":0,"indent":0,"elements":[{"type":"rich_text_section","elements":[{"text":" A mandatory module is pushed to all staff telling them about a new process or policy;","type":"text"}]},{"type":"rich_text_section","elements":[{"text":" A question is issued to all staff - “","type":"text"},{"text":"what gets in your way when you try to report a security concern?","type":"text","style":{"italic":true}},{"text":"”","type":"text"}]}]},{"type":"rich_text_section","elements":[{"text":"\nOnly the second suggests their experience matters enough to shape what happens next. Employees don't conclude “security cares about us” because of a well-produced campaign; they conclude it because, at some point, they said something was broken and we fixed it ","type":"text"},{"name":"white_check_mark","type":"emoji","unicode":"2705"},{"text":". Without that loop, even the best-designed awareness content reads as friction from someone who doesn't care ","type":"text"},{"name":"man-shrugging","type":"emoji","unicode":"1f937-200d-2642-fe0f"},{"text":".\n\nThe trouble is, one channel can't do this job. ","type":"text"},{"name":"female-office-worker","type":"emoji","style":{"bold":true},"unicode":"1f469-200d-1f4bc"},{"text":"Executives","type":"text","style":{"bold":true}},{"text":" rarely respond to a survey - listening to them means being in the room; ","type":"text"},{"name":"factory_worker","type":"emoji","style":{"bold":true},"unicode":"1f9d1-200d-1f3ed"},{"text":" Operational","type":"text","style":{"bold":true}},{"text":" ","type":"text"},{"text":"staff","type":"text","style":{"bold":true}},{"text":" live with legacy technologies that resist changes, so we need to walk the floor, not just email a policy; and ","type":"text"},{"name":"office_worker","type":"emoji","style":{"bold":true},"unicode":"1f9d1-200d-1f4bc"},{"text":"Office","type":"text","style":{"bold":true}},{"text":" ","type":"text"},{"text":"workers","type":"text","style":{"bold":true}},{"text":" leave a trail in help desk tickets and everyday grumbling about workplace process frictions that quietly drive workarounds. Treating all three as one audience is how we lose the connection, and the trust, we're trying to build.\n\nCollecting feedback is the easy part. What changes behaviour and creates culture is visibly ","type":"text"},{"text":"acting","type":"text","style":{"bold":true}},{"text":" on it. A control adjusted because the factory floor flagged it as unworkable, or a reporting process simplified because people kept giving up halfway through - these are the moments that convert feedback into ","type":"text"},{"text":"evidence of care","type":"text","style":{"bold":true}},{"text":".\nA feedback loop that goes nowhere is worse than none at all ","type":"text"},{"name":"black_right_pointing_triangle_with_double_vertical_bar","type":"emoji","unicode":"23ef-fe0f"},{"text":"- it teaches people not to bother. If users don't get a valid, personalised response to every suspicious email they report, they'll simply stop.\n\nSecurity culture isn't something a campaign announces into existence. It accumulates as the residue of hundreds of small moments where the organisation either responded to what people told it, or didn't. The key question isn't how to communicate security better - it's how well we listen, and what we're prepared to change because of what we hear ","type":"text"},{"name":"ear","type":"emoji","unicode":"1f442"},{"text":".\n\nSo, during Security Awareness Month, capture the voices, feedback and complaints from each person, and record who said what. Investigate, and circle back with personalised responses and explanations. We may not fix everything, but if people understand how, why and when, that's the basis for trust ","type":"text"},{"name":"heart_hands","type":"emoji","unicode":"1faf6"},{"text":".","type":"text"}]}]}],"markdown":"$4c","permalink":"https://hufileaders-community.slack.com/archives/C08T8KVNEF2/p1789458301289819?thread_ts=1789458301.289819&cid=C08T8KVNEF2","parent_slack_message_id":null,"username":null,"icon":null,"is_shared":false},"cover_image_file_id":"6dc0dd64-e319-41e3-854d-e9430ce8d3d4","cover_image_url":"https://pthsiwxwiiowghdtkwlv.supabase.co/storage/v1/object/public/slack_files/T08SMTNHW7L/93fdaeb1-4ea5-4afe-8ed2-72cfe4ee026d/F0C16H7F3FU/ECSM_Feedback%20Loops_2%20(1).png","author":{"id":"93fdaeb1-4ea5-4afe-8ed2-72cfe4ee026d","preferred_name":"Andrew R.","preferred_image_original":"https://avatars.slack-edge.com/2026-04-28/11011665146546_1a2e89ecd0ad36ba89ce_original.jpg","preferred_image_1024":"https://avatars.slack-edge.com/2026-04-28/11011665146546_1a2e89ecd0ad36ba89ce_1024.jpg","preferred_image_512":"https://avatars.slack-edge.com/2026-04-28/11011665146546_1a2e89ecd0ad36ba89ce_512.jpg","preferred_image_192":"https://avatars.slack-edge.com/2026-04-28/11011665146546_1a2e89ecd0ad36ba89ce_192.jpg","preferred_image_72":"https://avatars.slack-edge.com/2026-04-28/11011665146546_1a2e89ecd0ad36ba89ce_72.jpg","preferred_image_48":"https://avatars.slack-edge.com/2026-04-28/11011665146546_1a2e89ecd0ad36ba89ce_48.jpg","preferred_image_32":"https://avatars.slack-edge.com/2026-04-28/11011665146546_1a2e89ecd0ad36ba89ce_32.jpg","preferred_image_24":"https://avatars.slack-edge.com/2026-04-28/11011665146546_1a2e89ecd0ad36ba89ce_24.jpg","slack_profile_id":"U0B09HE1SBG","is_team_member":false,"slack_profile":{"id":"U0B09HE1SBG","is_admin":false,"is_bot":false,"is_forgotten":false,"deleted":false},"group_flair":null},"best_answer_message_id":null,"selected_answer_message_ids":[],"selected_answer_count":0,"feed":{"id":"6ed890b7-4027-4dcc-93a0-0c4a367f22bf","public_id":"feed_M19AZrcoIUgN","label":"03_best-practices","slug":"03best-practices","is_posting_from_site_allowed":true,"allow_selected_answer":false,"visibility":"public"},"references":{"mentioned_slack_users":[],"mentioned_slack_channels":[],"custom_emojis":[],"urls":[]}},{"id":"fimeywzedlah","message_id":"msg_LNgWqIvtHtpF","created_at":"2026-09-14T13:37:25.16265+00:00","content_created_at":"2026-09-14T13:37:18.182+00:00","latest_activity_at":"2026-09-14T13:37:18.182+00:00","title":"How to Shift from Data Points to Trends and Stories for Effective Boardroom Communication","slug":"how-to-shift-from-data-points-to-trends-and-storie","description":"Learn how to present business data effectively by focusing on key indicators and trends rather than raw data points for boardroom success.","feed_id":"5b7feeba-8b21-4800-9367-02f765e79fac","post_detail_display_format":"discussion","author_profile_id":"93fdaeb1-4ea5-4afe-8ed2-72cfe4ee026d","body_prosemirror":{"type":"doc","content":[{"type":"paragraph","content":[{"text":"Thanks for comments ","type":"text"},{"type":"mention","attrs":{"label":"Lars S.","profile_id":"12d9e937-56db-47b9-b45c-2caa7c75f555","slack_user_id":"U09QGE4F080"}},{"text":" ","type":"text"},{"type":"mention","attrs":{"label":"Sabrina H.","profile_id":"71f0d84e-1bf3-4493-a430-e638937e8b86","slack_user_id":"U08SSDES18X"}},{"text":". My recommendation is definitely to switch from 'data points' to 'indicators' to 'trends and stories' as you go up the hierarchy. Going into a Boardroom with lots of data is asking for trouble, they'll select an outlier point and quiz you on it until you can't answer, then they'll disregard the whole lot.","type":"text"}]},{"type":"paragraph","content":[{"text":"Choosing 'what matters' is always a challenge - but you know your business and what matters. Is it uptime, safety, product design, price, reputation etc? Find the key aspects and then see how you can relate your metrics to those.","type":"text"}]},{"type":"paragraph","content":[{"text":"I did a speech to the SoSafe Virtual Academy a few weeks ago which touched on this topic, and included some examples. I'll be posting that in the community in the first weeks of October.","type":"text"}]}]},"body_plaintext":"Thanks for comments @Lars S. @Sabrina H.. My recommendation is definitely to switch from 'data points' to 'indicators' to 'trends and stories' as you go up the hierarchy. Going into a Boardroom with lots of data is asking for trouble, they'll select an outlier point and quiz you on it until you can't answer, then they'll disregard the whole lot.\n\nChoosing 'what matters' is always a challenge - but you know your business and what matters. Is it uptime, safety, product design, price, reputation etc? Find the key aspects and then see how you can relate your metrics to those.\n\nI did a speech to the SoSafe Virtual Academy a few weeks ago which touched on this topic, and included some examples. I'll be posting that in the community in the first weeks of October.","source":"slack","edited_at":null,"version":0,"is_published":true,"file_attachments_count":0,"reactions_count":1,"comments_count":0,"slack_message":{"id":"8d174907-36ad-42bc-b928-53ef1f9d16a7","message_ts":"1789393038.182099","blocks":[{"type":"rich_text","block_id":"/Lrlb","elements":[{"type":"rich_text_section","elements":[{"text":"Thanks for comments ","type":"text"},{"type":"user","user_id":"U09QGE4F080"},{"text":" ","type":"text"},{"type":"user","user_id":"U08SSDES18X"},{"text":". My recommendation is definitely to switch from 'data points' to 'indicators' to 'trends and stories' as you go up the hierarchy. Going into a Boardroom with lots of data is asking for trouble, they'll select an outlier point and quiz you on it until you can't answer, then they'll disregard the whole lot.\n\nChoosing 'what matters' is always a challenge - but you know your business and what matters. Is it uptime, safety, product design, price, reputation etc? Find the key aspects and then see how you can relate your metrics to those.\n\nI did a speech to the SoSafe Virtual Academy a few weeks ago which touched on this topic, and included some examples. I'll be posting that in the community in the first weeks of October.","type":"text"}]}]}],"markdown":"Thanks for comments <@U09QGE4F080> <@U08SSDES18X>. My recommendation is definitely to switch from 'data points' to 'indicators' to 'trends and stories' as you go up the hierarchy. Going into a Boardroom with lots of data is asking for trouble, they'll select an outlier point and quiz you on it until you can't answer, then they'll disregard the whole lot.\n\nChoosing 'what matters' is always a challenge - but you know your business and what matters. Is it uptime, safety, product design, price, reputation etc? Find the key aspects and then see how you can relate your metrics to those.\n\nI did a speech to the SoSafe Virtual Academy a few weeks ago which touched on this topic, and included some examples. I'll be posting that in the community in the first weeks of October.","permalink":"https://hufileaders-community.slack.com/archives/C08SGHA7RE3/p1789393038182099?thread_ts=1789393038.182099&cid=C08SGHA7RE3","parent_slack_message_id":null,"username":null,"icon":null,"is_shared":false},"cover_image_file_id":null,"cover_image_url":null,"author":{"id":"93fdaeb1-4ea5-4afe-8ed2-72cfe4ee026d","preferred_name":"Andrew R.","preferred_image_original":"https://avatars.slack-edge.com/2026-04-28/11011665146546_1a2e89ecd0ad36ba89ce_original.jpg","preferred_image_1024":"https://avatars.slack-edge.com/2026-04-28/11011665146546_1a2e89ecd0ad36ba89ce_1024.jpg","preferred_image_512":"https://avatars.slack-edge.com/2026-04-28/11011665146546_1a2e89ecd0ad36ba89ce_512.jpg","preferred_image_192":"https://avatars.slack-edge.com/2026-04-28/11011665146546_1a2e89ecd0ad36ba89ce_192.jpg","preferred_image_72":"https://avatars.slack-edge.com/2026-04-28/11011665146546_1a2e89ecd0ad36ba89ce_72.jpg","preferred_image_48":"https://avatars.slack-edge.com/2026-04-28/11011665146546_1a2e89ecd0ad36ba89ce_48.jpg","preferred_image_32":"https://avatars.slack-edge.com/2026-04-28/11011665146546_1a2e89ecd0ad36ba89ce_32.jpg","preferred_image_24":"https://avatars.slack-edge.com/2026-04-28/11011665146546_1a2e89ecd0ad36ba89ce_24.jpg","slack_profile_id":"U0B09HE1SBG","is_team_member":false,"slack_profile":{"id":"U0B09HE1SBG","is_admin":false,"is_bot":false,"is_forgotten":false,"deleted":false},"group_flair":null},"best_answer_message_id":null,"selected_answer_message_ids":[],"selected_answer_count":0,"feed":{"id":"5b7feeba-8b21-4800-9367-02f765e79fac","public_id":"feed_sP8tAtdXTgQn","label":"01_news","slug":"01news","is_posting_from_site_allowed":true,"allow_selected_answer":false,"visibility":"public"},"references":{"mentioned_slack_users":[{"profile_id":"71f0d84e-1bf3-4493-a430-e638937e8b86","slack_user_id":"U08SSDES18X","preferred_name":"Sabrina H."},{"profile_id":"12d9e937-56db-47b9-b45c-2caa7c75f555","slack_user_id":"U09QGE4F080","preferred_name":"Lars S."}],"mentioned_slack_channels":[],"custom_emojis":[],"urls":[]}},{"id":"ldkmue1m8967","message_id":"msg_Yt80zdwjmkyc","created_at":"2026-09-14T12:02:15.342861+00:00","content_created_at":"2026-09-14T12:02:10.918+00:00","latest_activity_at":"2026-09-14T12:02:10.918+00:00","title":"Choosing the Right KPIs for Different Organizational Levels in Cybersecurity","slug":"choosing-the-right-kpis-for-different-organization","description":"Insights on selecting effective KPIs and aligning stakeholder understanding in cybersecurity management.","feed_id":"5b7feeba-8b21-4800-9367-02f765e79fac","post_detail_display_format":"discussion","author_profile_id":"71f0d84e-1bf3-4493-a430-e638937e8b86","body_prosemirror":{"type":"doc","content":[{"type":"paragraph","content":[{"text":"Thanks ","type":"text"},{"type":"mention","attrs":{"label":"Andrew R.","profile_id":"93fdaeb1-4ea5-4afe-8ed2-72cfe4ee026d","slack_user_id":"U0B09HE1SBG"}},{"text":" choosing the right KPIs for different levels is an art in itself that depends highly on the art of Stakeholder Management or even the standing that you have in an organisation. As a Cybersecurity Professional you see so clear and you also understand what level the Management may understand. Still the main challenge is to get ","type":"text"},{"text":"all ","type":"text","marks":[{"type":"bold"}]},{"text":"parties involved to a common understanding on what really makes sense.","type":"text"}]}]},"body_plaintext":"Thanks @Andrew R. choosing the right KPIs for different levels is an art in itself that depends highly on the art of Stakeholder Management or even the standing that you have in an organisation. As a Cybersecurity Professional you see so clear and you also understand what level the Management may understand. Still the main challenge is to get all parties involved to a common understanding on what really makes sense.","source":"slack","edited_at":null,"version":0,"is_published":true,"file_attachments_count":0,"reactions_count":0,"comments_count":0,"slack_message":{"id":"f4eb1156-42e3-4b2d-ac6c-0282d6d5c0e7","message_ts":"1789387330.918879","blocks":[{"type":"rich_text","block_id":"nK6Fn","elements":[{"type":"rich_text_section","elements":[{"text":"Thanks ","type":"text"},{"type":"user","user_id":"U0B09HE1SBG"},{"text":" choosing the right KPIs for different levels is an art in itself that depends highly on the art of Stakeholder Management or even the standing that you have in an organisation. As a Cybersecurity Professional you see so clear and you also understand what level the Management may understand. Still the main challenge is to get ","type":"text"},{"text":"all ","type":"text","style":{"bold":true}},{"text":"parties involved to a common understanding on what really makes sense.","type":"text"}]}]}],"markdown":"Thanks <@U0B09HE1SBG> choosing the right KPIs for different levels is an art in itself that depends highly on the art of Stakeholder Management or even the standing that you have in an organisation. As a Cybersecurity Professional you see so clear and you also understand what level the Management may understand. Still the main challenge is to get *all* parties involved to a common understanding on what really makes sense.","permalink":"https://hufileaders-community.slack.com/archives/C08SGHA7RE3/p1789387330918879?thread_ts=1789387330.918879&cid=C08SGHA7RE3","parent_slack_message_id":null,"username":null,"icon":null,"is_shared":false},"cover_image_file_id":null,"cover_image_url":null,"author":{"id":"71f0d84e-1bf3-4493-a430-e638937e8b86","preferred_name":"Sabrina H.","preferred_image_original":null,"preferred_image_1024":null,"preferred_image_512":"https://secure.gravatar.com/avatar/7aa0382a0edf9401837c554ad83a497c.jpg?s=512&d=https%3A%2F%2Fa.slack-edge.com%2Fdf10d%2Fimg%2Favatars%2Fava_0000-512.png","preferred_image_192":"https://secure.gravatar.com/avatar/7aa0382a0edf9401837c554ad83a497c.jpg?s=192&d=https%3A%2F%2Fa.slack-edge.com%2Fdf10d%2Fimg%2Favatars%2Fava_0000-192.png","preferred_image_72":"https://secure.gravatar.com/avatar/7aa0382a0edf9401837c554ad83a497c.jpg?s=72&d=https%3A%2F%2Fa.slack-edge.com%2Fdf10d%2Fimg%2Favatars%2Fava_0000-72.png","preferred_image_48":"https://secure.gravatar.com/avatar/7aa0382a0edf9401837c554ad83a497c.jpg?s=48&d=https%3A%2F%2Fa.slack-edge.com%2Fdf10d%2Fimg%2Favatars%2Fava_0000-48.png","preferred_image_32":"https://secure.gravatar.com/avatar/7aa0382a0edf9401837c554ad83a497c.jpg?s=32&d=https%3A%2F%2Fa.slack-edge.com%2Fdf10d%2Fimg%2Favatars%2Fava_0000-32.png","preferred_image_24":"https://secure.gravatar.com/avatar/7aa0382a0edf9401837c554ad83a497c.jpg?s=24&d=https%3A%2F%2Fa.slack-edge.com%2Fdf10d%2Fimg%2Favatars%2Fava_0000-24.png","slack_profile_id":"U08SSDES18X","is_team_member":false,"slack_profile":{"id":"U08SSDES18X","is_admin":false,"is_bot":false,"is_forgotten":false,"deleted":false},"group_flair":null},"best_answer_message_id":null,"selected_answer_message_ids":[],"selected_answer_count":0,"feed":{"id":"5b7feeba-8b21-4800-9367-02f765e79fac","public_id":"feed_sP8tAtdXTgQn","label":"01_news","slug":"01news","is_posting_from_site_allowed":true,"allow_selected_answer":false,"visibility":"public"},"references":{"mentioned_slack_users":[{"profile_id":"93fdaeb1-4ea5-4afe-8ed2-72cfe4ee026d","slack_user_id":"U0B09HE1SBG","preferred_name":"Andrew R."}],"mentioned_slack_channels":[],"custom_emojis":[],"urls":[]}},{"id":"4ig6dx1i4mij","message_id":"msg_W9l6rJWbWlzP","created_at":"2026-09-14T11:17:59.410794+00:00","content_created_at":"2026-09-14T11:17:54.872+00:00","latest_activity_at":"2026-09-14T11:17:54.872+00:00","title":"How to Identify Valuable KPIs and RPIs for Effective Management Decisions","slug":"how-to-identify-valuable-kpis-and-rpis-for-effecti","description":"Tips and insights on selecting effective KPI and RPI metrics that provide real value for management decision-making.","feed_id":"5b7feeba-8b21-4800-9367-02f765e79fac","post_detail_display_format":"discussion","author_profile_id":"12d9e937-56db-47b9-b45c-2caa7c75f555","body_prosemirror":{"type":"doc","content":[{"type":"paragraph","content":[{"text":"Hey thanks ","type":"text"},{"type":"mention","attrs":{"label":"Andrew R.","profile_id":"93fdaeb1-4ea5-4afe-8ed2-72cfe4ee026d","slack_user_id":"U0B09HE1SBG"}},{"text":" for sharing, this definitely helps. I think I mentioned it in another post, but KPI/RPI implementation is one of my biggest struggles. The hard part is figuring out which metrics actually matter and provide real value to management when making decisions. There are a few good ones on this list that I'll definitely take a closer look at.","type":"text"}]}]},"body_plaintext":"Hey thanks @Andrew R. for sharing, this definitely helps. I think I mentioned it in another post, but KPI/RPI implementation is one of my biggest struggles. The hard part is figuring out which metrics actually matter and provide real value to management when making decisions. There are a few good ones on this list that I'll definitely take a closer look at.","source":"slack","edited_at":null,"version":0,"is_published":true,"file_attachments_count":0,"reactions_count":0,"comments_count":0,"slack_message":{"id":"9d21c235-0039-431b-a86b-1475b91defe8","message_ts":"1789384674.872489","blocks":[{"type":"rich_text","block_id":"mXS7r","elements":[{"type":"rich_text_section","elements":[{"text":"Hey thanks ","type":"text"},{"type":"user","user_id":"U0B09HE1SBG"},{"text":" for sharing, this definitely helps. I think I mentioned it in another post, but KPI/RPI implementation is one of my biggest struggles. The hard part is figuring out which metrics actually matter and provide real value to management when making decisions. There are a few good ones on this list that I'll definitely take a closer look at.","type":"text"}]}]}],"markdown":"Hey thanks <@U0B09HE1SBG> for sharing, this definitely helps. I think I mentioned it in another post, but KPI/RPI implementation is one of my biggest struggles. The hard part is figuring out which metrics actually matter and provide real value to management when making decisions. There are a few good ones on this list that I'll definitely take a closer look at.","permalink":"https://hufileaders-community.slack.com/archives/C08SGHA7RE3/p1789384674872489?thread_ts=1789384674.872489&cid=C08SGHA7RE3","parent_slack_message_id":null,"username":null,"icon":null,"is_shared":false},"cover_image_file_id":null,"cover_image_url":null,"author":{"id":"12d9e937-56db-47b9-b45c-2caa7c75f555","preferred_name":"Lars S.","preferred_image_original":"https://avatars.slack-edge.com/2025-10-30/9800750984901_8554a0be7e05bf0e9635_original.jpg","preferred_image_1024":"https://avatars.slack-edge.com/2025-10-30/9800750984901_8554a0be7e05bf0e9635_1024.jpg","preferred_image_512":"https://avatars.slack-edge.com/2025-10-30/9800750984901_8554a0be7e05bf0e9635_512.jpg","preferred_image_192":"https://avatars.slack-edge.com/2025-10-30/9800750984901_8554a0be7e05bf0e9635_192.jpg","preferred_image_72":"https://avatars.slack-edge.com/2025-10-30/9800750984901_8554a0be7e05bf0e9635_72.jpg","preferred_image_48":"https://avatars.slack-edge.com/2025-10-30/9800750984901_8554a0be7e05bf0e9635_48.jpg","preferred_image_32":"https://avatars.slack-edge.com/2025-10-30/9800750984901_8554a0be7e05bf0e9635_32.jpg","preferred_image_24":"https://avatars.slack-edge.com/2025-10-30/9800750984901_8554a0be7e05bf0e9635_24.jpg","slack_profile_id":"U09QGE4F080","is_team_member":false,"slack_profile":{"id":"U09QGE4F080","is_admin":false,"is_bot":false,"is_forgotten":false,"deleted":false},"group_flair":null},"best_answer_message_id":null,"selected_answer_message_ids":[],"selected_answer_count":0,"feed":{"id":"5b7feeba-8b21-4800-9367-02f765e79fac","public_id":"feed_sP8tAtdXTgQn","label":"01_news","slug":"01news","is_posting_from_site_allowed":true,"allow_selected_answer":false,"visibility":"public"},"references":{"mentioned_slack_users":[{"profile_id":"93fdaeb1-4ea5-4afe-8ed2-72cfe4ee026d","slack_user_id":"U0B09HE1SBG","preferred_name":"Andrew R."}],"mentioned_slack_channels":[],"custom_emojis":[],"urls":[]}},{"id":"7v5d8v25yapg","message_id":"msg_4U8zdMYDAOgf","created_at":"2026-09-14T10:50:22.930591+00:00","content_created_at":"2026-09-14T10:50:19.555+00:00","latest_activity_at":"2026-09-14T10:50:19.555+00:00","title":"Signal Watch: Operational Security Metrics to Add Value in Security Management","slug":"signal-watch-operational-security-metrics-to-add-v","description":"Explore key operational security metrics to help improve security management and measure what truly adds value.","feed_id":"5b7feeba-8b21-4800-9367-02f765e79fac","post_detail_display_format":"discussion","author_profile_id":"93fdaeb1-4ea5-4afe-8ed2-72cfe4ee026d","body_prosemirror":{"type":"doc","content":[{"type":"paragraph","content":[{"text":"Signal Watch | Operational Security Metrics","type":"text","marks":[{"type":"bold"}]}]},{"type":"paragraph","content":[{"text":"@channel","type":"text"},{"text":" Metrics are one of the most challenging aspects of the security management role and trying to think of what to measure, that truly adds value, can be a real problem. I stumbled across this list today and thought it may help people with that process.","type":"text"}]}]},"body_plaintext":"Signal Watch | Operational Security Metrics\n\n@channel Metrics are one of the most challenging aspects of the security management role and trying to think of what to measure, that truly adds value, can be a real problem. I stumbled across this list today and thought it may help people with that process.","source":"slack","edited_at":null,"version":0,"is_published":true,"file_attachments_count":1,"reactions_count":1,"comments_count":0,"slack_message":{"id":"eb8ae024-7b32-4dc3-8d44-90c609ae8499","message_ts":"1789383019.555479","blocks":[{"type":"rich_text","block_id":"fktNK","elements":[{"type":"rich_text_section","elements":[{"text":"Signal Watch | Operational Security Metrics","type":"text","style":{"bold":true}},{"text":"\n\n","type":"text"},{"type":"broadcast","range":"channel"},{"text":" Metrics are one of the most challenging aspects of the security management role and trying to think of what to measure, that truly adds value, can be a real problem. I stumbled across this list today and thought it may help people with that process.","type":"text"}]}]}],"markdown":"*Signal Watch | Operational Security Metrics*\n\n Metrics are one of the most challenging aspects of the security management role and trying to think of what to measure, that truly adds value, can be a real problem. I stumbled across this list today and thought it may help people with that process.","permalink":"https://hufileaders-community.slack.com/archives/C08SGHA7RE3/p1789383019555479?thread_ts=1789383019.555479&cid=C08SGHA7RE3","parent_slack_message_id":null,"username":null,"icon":null,"is_shared":false},"cover_image_file_id":"edd6effc-e6e2-4eb3-973f-897e55690d72","cover_image_url":"https://pthsiwxwiiowghdtkwlv.supabase.co/storage/v1/object/public/slack_files/T08SMTNHW7L/93fdaeb1-4ea5-4afe-8ed2-72cfe4ee026d/F0C1RUX688L/1789233091021.jpeg","author":{"id":"93fdaeb1-4ea5-4afe-8ed2-72cfe4ee026d","preferred_name":"Andrew R.","preferred_image_original":"https://avatars.slack-edge.com/2026-04-28/11011665146546_1a2e89ecd0ad36ba89ce_original.jpg","preferred_image_1024":"https://avatars.slack-edge.com/2026-04-28/11011665146546_1a2e89ecd0ad36ba89ce_1024.jpg","preferred_image_512":"https://avatars.slack-edge.com/2026-04-28/11011665146546_1a2e89ecd0ad36ba89ce_512.jpg","preferred_image_192":"https://avatars.slack-edge.com/2026-04-28/11011665146546_1a2e89ecd0ad36ba89ce_192.jpg","preferred_image_72":"https://avatars.slack-edge.com/2026-04-28/11011665146546_1a2e89ecd0ad36ba89ce_72.jpg","preferred_image_48":"https://avatars.slack-edge.com/2026-04-28/11011665146546_1a2e89ecd0ad36ba89ce_48.jpg","preferred_image_32":"https://avatars.slack-edge.com/2026-04-28/11011665146546_1a2e89ecd0ad36ba89ce_32.jpg","preferred_image_24":"https://avatars.slack-edge.com/2026-04-28/11011665146546_1a2e89ecd0ad36ba89ce_24.jpg","slack_profile_id":"U0B09HE1SBG","is_team_member":false,"slack_profile":{"id":"U0B09HE1SBG","is_admin":false,"is_bot":false,"is_forgotten":false,"deleted":false},"group_flair":null},"best_answer_message_id":null,"selected_answer_message_ids":[],"selected_answer_count":0,"feed":{"id":"5b7feeba-8b21-4800-9367-02f765e79fac","public_id":"feed_sP8tAtdXTgQn","label":"01_news","slug":"01news","is_posting_from_site_allowed":true,"allow_selected_answer":false,"visibility":"public"},"references":{"mentioned_slack_users":[],"mentioned_slack_channels":[],"custom_emojis":[],"urls":[]}},{"id":"xugosp1ozjrj","message_id":"msg_rQJomefWmWEJ","created_at":"2026-09-08T10:04:55.761806+00:00","content_created_at":"2026-09-08T10:04:55.672+00:00","latest_activity_at":"2026-09-08T10:04:55.672+00:00","title":"Discover the new Community Hub for Signal 2026","slug":"new-community-hub-for-signal-2026","description":null,"feed_id":"089f8ca7-70aa-4d1c-bcca-4cdd0be8f882","post_detail_display_format":"discussion","author_profile_id":"c453109b-a77c-442c-8ff0-995f04accf44","body_prosemirror":{"type":"doc","content":[{"type":"heading","attrs":{"level":2},"content":[{"text":"Signal 2026 is coming!","type":"text"}]},{"type":"image","attrs":{"alt":"Signal Security Summit _ Master Slides (1)","src":"https://cdn.tightknit.ai/b5e803d8-7371-4f29-94df-f17132b738a9/c453109b-a77c-442c-8ff0-995f04accf44/upload/file_gm2n4lsngPek/c5792486-Signal_Security_Summit_Master_Slides_1_.png","title":"Signal Security Summit _ Master Slides (1)","width":null,"fileId":"file_gm2n4lsngPek","height":null,"mimeType":"image/png"}},{"type":"paragraph","content":[{"text":"On ","type":"text"},{"text":"November 18, 2026","type":"text","marks":[{"type":"bold"}]},{"text":", the security community comes together in Cologne for ","type":"text"},{"text":"Signal Security Summit","type":"text","marks":[{"type":"bold"}]},{"text":", SoSafe’s flagship event bringing together security leaders and practitioners to explore the human factor in cybersecurity.","type":"text"}]},{"type":"paragraph","content":[{"text":"Expect a full day of keynotes, customer stories, masterclasses and conversations around ","type":"text"},{"text":"AI, cyber resilience, security culture, human risk and more","type":"text","marks":[{"type":"bold"}]},{"text":", with ","type":"text"},{"text":"50+ speakers across 5 stages","type":"text","marks":[{"type":"bold"}]},{"text":".","type":"text"}]},{"type":"paragraph","content":[{"text":"📍 ","type":"text"},{"text":"Die Halle Tor 2, Cologne","type":"text","marks":[{"type":"bold"}]},{"type":"hardBreak"},{"text":"📅 ","type":"text"},{"text":"November 18, 2026","type":"text","marks":[{"type":"bold"}]},{"type":"hardBreak"}]},{"type":"paragraph"},{"type":"blockquote","content":[{"type":"paragraph","content":[{"text":"Not registered yet? Secure your spot for Signal 2026:","type":"text"},{"type":"hardBreak"},{"text":"👉 ","type":"text"},{"text":"Register for Signal 2026","type":"text","marks":[{"type":"link","attrs":{"href":"https://signal.sosafe-awareness.com/"}}]}]}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"Connect before, during and after Signal","type":"text"}]},{"type":"paragraph","content":[{"text":"Signal is about more than what happens on stage. It’s about the conversations, experiences and connections you take away from the day - and continue afterwards.","type":"text"}]},{"type":"paragraph","content":[{"text":"That’s why we’ve created the ","type":"text"},{"text":"Signal 2026 space here in the SoSafe Community","type":"text","marks":[{"type":"bold"}]},{"text":".","type":"text"}]},{"type":"paragraph","content":[{"text":"This is where you can get connected with other attendees and security professionals, exchange perspectives ahead of the event, and stay part of the conversation beyond November 18.","type":"text"},{"type":"hardBreak"}]},{"type":"paragraph","content":[{"text":"Over the coming weeks, we’ll share:","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Opportunities to connect with peers","type":"text","marks":[{"type":"bold"}]},{"text":" and find people with similar interests and challenges","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"What to expect at Signal","type":"text","marks":[{"type":"bold"}]},{"text":" and how to make the most of your day","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Conversations and topics from the event","type":"text","marks":[{"type":"bold"}]},{"text":" - before, during and after Signal","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Ways to get involved","type":"text","marks":[{"type":"bold"}]},{"text":" and meet fellow Community members onsite","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"A few ","type":"text"},{"text":"surprises along the way","type":"text","marks":[{"type":"bold"}]},{"type":"hardBreak"}]}]}]},{"type":"paragraph"},{"type":"paragraph","content":[{"text":"Think of this space as your ","type":"text"},{"text":"digital home for the Signal experience","type":"text","marks":[{"type":"bold"}]},{"text":" - a place to connect before we meet in Cologne and keep the conversations going afterwards.","type":"text"},{"type":"hardBreak"}]},{"type":"paragraph","content":[{"text":"Follow the Signal 2026 space and join the conversation.","type":"text"}]},{"type":"paragraph","content":[{"text":"See you at Signal. 👋","type":"text"}]}]},"body_plaintext":"$4d","source":"site","edited_at":"2026-09-08T14:00:19.81+00:00","version":5,"is_published":true,"file_attachments_count":1,"reactions_count":0,"comments_count":0,"slack_message":{"id":"6c83416d-00b8-4895-ab84-5a1ddba6d958","message_ts":"1788861897.821619","blocks":[{"text":{"text":"Discover the new Community Hub for Signal 2026","type":"plain_text","emoji":true},"type":"header","level":1,"block_id":"i4Ql3"},{"text":{"text":"Signal 2026 is coming!","type":"plain_text","emoji":true},"type":"header","level":2,"block_id":"zTiT8"},{"type":"image","title":{"text":"Signal Security Summit _ Master Slides (1)","type":"plain_text","emoji":true},"alt_text":"Signal Security Summit _ Master Slides (1)","block_id":"aZU50","fallback":"960x540px image","image_url":"https://cdn.tightknit.ai/b5e803d8-7371-4f29-94df-f17132b738a9/c453109b-a77c-442c-8ff0-995f04accf44/upload/file_gm2n4lsngPek/c5792486-Signal_Security_Summit_Master_Slides_1_.png","image_bytes":324362,"image_width":960,"is_animated":true,"image_height":540},{"type":"rich_text","block_id":"nFUsR","elements":[{"type":"rich_text_section","elements":[{"text":"On ","type":"text"},{"text":"November 18, 2026","type":"text","style":{"bold":true}},{"text":", the security community comes together in Cologne for ","type":"text"},{"text":"Signal Security Summit","type":"text","style":{"bold":true}},{"text":", SoSafe’s flagship event bringing together security leaders and practitioners to explore the human factor in cybersecurity.","type":"text"}]}]},{"type":"rich_text","block_id":"dDrBv","elements":[{"type":"rich_text_section","elements":[{"text":"Expect a full day of keynotes, customer stories, masterclasses and conversations around ","type":"text"},{"text":"AI, cyber resilience, security culture, human risk and more","type":"text","style":{"bold":true}},{"text":", with ","type":"text"},{"text":"50+ speakers across 5 stages","type":"text","style":{"bold":true}},{"text":".","type":"text"}]}]},{"type":"rich_text","block_id":"ZcOqS","elements":[{"type":"rich_text_section","elements":[{"name":"round_pushpin","type":"emoji","unicode":"1f4cd"},{"text":" ","type":"text"},{"text":"Die Halle Tor 2, Cologne","type":"text","style":{"bold":true}},{"text":"\n","type":"text"},{"name":"date","type":"emoji","unicode":"1f4c5"},{"text":" ","type":"text"},{"text":"November 18, 2026","type":"text","style":{"bold":true}},{"text":"\n","type":"text"}]}]},{"type":"rich_text","block_id":"nxRh2","elements":[{"type":"rich_text_section","elements":[]}]},{"type":"rich_text","block_id":"Ep4/O","elements":[{"type":"rich_text_quote","elements":[{"text":"Not registered yet? Secure your spot for Signal 2026:","type":"text"},{"text":"\n","type":"text"},{"name":"point_right","type":"emoji","unicode":"1f449"},{"text":" ","type":"text"},{"url":"https://signal.sosafe-awareness.com/","text":"Register for Signal 2026","type":"link"}]}]},{"text":{"text":"Connect before, during and after Signal","type":"plain_text","emoji":true},"type":"header","level":3,"block_id":"ypFVG"},{"type":"rich_text","block_id":"nD4yk","elements":[{"type":"rich_text_section","elements":[{"text":"Signal is about more than what happens on stage. It’s about the conversations, experiences and connections you take away from the day - and continue afterwards.","type":"text"}]}]},{"type":"rich_text","block_id":"n/1jH","elements":[{"type":"rich_text_section","elements":[{"text":"That’s why we’ve created the ","type":"text"},{"text":"Signal 2026 space here in the SoSafe Community","type":"text","style":{"bold":true}},{"text":".","type":"text"}]}]},{"type":"rich_text","block_id":"k0G04","elements":[{"type":"rich_text_section","elements":[{"text":"This is where you can get connected with other attendees and security professionals, exchange perspectives ahead of the event, and stay part of the conversation beyond November 18.","type":"text"},{"text":"\n","type":"text"}]}]},{"type":"rich_text","block_id":"lW3KX","elements":[{"type":"rich_text_section","elements":[{"text":"Over the coming weeks, we’ll share:","type":"text"}]}]},{"type":"rich_text","block_id":"/qPUm","elements":[{"type":"rich_text_list","style":"bullet","indent":0,"elements":[{"type":"rich_text_section","elements":[{"text":"Opportunities to connect with peers","type":"text","style":{"bold":true}},{"text":" and find people with similar interests and challenges","type":"text"}]},{"type":"rich_text_section","elements":[{"text":"What to expect at Signal","type":"text","style":{"bold":true}},{"text":" and how to make the most of your day","type":"text"}]},{"type":"rich_text_section","elements":[{"text":"Conversations and topics from the event","type":"text","style":{"bold":true}},{"text":" - before, during and after Signal","type":"text"}]},{"type":"rich_text_section","elements":[{"text":"Ways to get involved","type":"text","style":{"bold":true}},{"text":" and meet fellow Community members onsite","type":"text"}]},{"type":"rich_text_section","elements":[{"text":"A few ","type":"text"},{"text":"surprises along the way","type":"text","style":{"bold":true}},{"text":"\n","type":"text"}]}]}]},{"type":"rich_text","block_id":"QbM5t","elements":[{"type":"rich_text_section","elements":[]}]},{"type":"rich_text","block_id":"4x8r7","elements":[{"type":"rich_text_section","elements":[{"text":"Think of this space as your ","type":"text"},{"text":"digital home for the Signal experience","type":"text","style":{"bold":true}},{"text":" - a place to connect before we meet in Cologne and keep the conversations going afterwards.","type":"text"},{"text":"\n","type":"text"}]}]},{"type":"rich_text","block_id":"U3o56","elements":[{"type":"rich_text_section","elements":[{"text":"Follow the Signal 2026 space and join the conversation.","type":"text"}]}]},{"type":"rich_text","block_id":"zlN2U","elements":[{"type":"rich_text_section","elements":[{"text":"See you at Signal. ","type":"text"},{"name":"wave","type":"emoji","unicode":"1f44b"}]}]},{"type":"context","block_id":"l8SBf","elements":[{"text":"_Posted from the _","type":"mrkdwn","verbatim":false}]}],"markdown":"$4e","permalink":"https://hufileaders-community.slack.com/archives/C0C075G7JTG/p1788861897821619","parent_slack_message_id":null,"username":"Melissa (SoSafe)","icon":null,"is_shared":false},"cover_image_file_id":"bc525911-1902-4bd9-b97b-4fd26aa6ba3f","cover_image_url":"https://cdn.tightknit.ai/b5e803d8-7371-4f29-94df-f17132b738a9/c453109b-a77c-442c-8ff0-995f04accf44/upload/file_gm2n4lsngPek/c5792486-Signal_Security_Summit_Master_Slides_1_.png","author":{"id":"c453109b-a77c-442c-8ff0-995f04accf44","preferred_name":"Melissa G.","preferred_image_original":"https://avatars.slack-edge.com/2025-05-18/8917708953764_318d08cea0c88ac4fae4_original.jpg","preferred_image_1024":"https://avatars.slack-edge.com/2025-05-18/8917708953764_318d08cea0c88ac4fae4_1024.jpg","preferred_image_512":"https://avatars.slack-edge.com/2025-05-18/8917708953764_318d08cea0c88ac4fae4_512.jpg","preferred_image_192":"https://avatars.slack-edge.com/2025-05-18/8917708953764_318d08cea0c88ac4fae4_192.jpg","preferred_image_72":"https://avatars.slack-edge.com/2025-05-18/8917708953764_318d08cea0c88ac4fae4_72.jpg","preferred_image_48":"https://avatars.slack-edge.com/2025-05-18/8917708953764_318d08cea0c88ac4fae4_48.jpg","preferred_image_32":"https://avatars.slack-edge.com/2025-05-18/8917708953764_318d08cea0c88ac4fae4_32.jpg","preferred_image_24":"https://avatars.slack-edge.com/2025-05-18/8917708953764_318d08cea0c88ac4fae4_24.jpg","slack_profile_id":"U08T2DC4X6V","is_team_member":false,"slack_profile":{"id":"U08T2DC4X6V","is_admin":true,"is_bot":false,"is_forgotten":false,"deleted":false},"group_flair":null},"best_answer_message_id":null,"selected_answer_message_ids":[],"selected_answer_count":0,"feed":{"id":"089f8ca7-70aa-4d1c-bcca-4cdd0be8f882","public_id":"feed_DkXaTtwuyKlY","label":"Signal 2026","slug":"signal2026","is_posting_from_site_allowed":true,"allow_selected_answer":false,"visibility":"public"},"references":{"mentioned_slack_users":[],"mentioned_slack_channels":[],"custom_emojis":[],"urls":[{"url":"https://cdn.tightknit.ai/b5e803d8-7371-4f29-94df-f17132b738a9/c453109b-a77c-442c-8ff0-995f04accf44/upload/file_gm2n4lsngPek/c5792486-Signal_Security_Summit_Master_Slides_1_.png","is_image":true,"is_video":false,"order_seen":0,"is_embedded_media":true},{"url":"https://signal.sosafe-awareness.com/","is_image":false,"is_video":false,"order_seen":1,"is_embedded_media":false},{"url":"https://community.hufileaders.com/x/signal2026/msg_rQJomefWmWEJ/new-community-hub-for-signal-2026","is_image":false,"is_video":false,"order_seen":2,"is_embedded_media":false}]}},{"id":"er4i7666sylp","message_id":"msg_0N4ILZ1SuLah","created_at":"2026-09-08T08:41:23.737092+00:00","content_created_at":"2026-09-08T08:41:20.138+00:00","latest_activity_at":"2026-09-08T08:56:27.119+00:00","title":"European Cyber Security Month 2026: Planning Effective Security Awareness Communications","slug":"european-cyber-security-month-2026-planning-effect","description":"Prepare for European Cyber Security Month with tips on cultural assessment, ready-to-use content, and a strategic communications plan template.","feed_id":"6ed890b7-4027-4dcc-93a0-0c4a367f22bf","post_detail_display_format":"discussion","author_profile_id":"93fdaeb1-4ea5-4afe-8ed2-72cfe4ee026d","body_prosemirror":{"type":"doc","content":[{"type":"paragraph","content":[{"text":"European Cyber Security Month - Planning The Delivery","type":"text","marks":[{"type":"bold"}]}]},{"type":"paragraph","content":[{"text":"@channel","type":"text"},{"text":" October is nearly here! It’s the pinnacle moment in many of our programmes, when we get permission to push our message harder than ever across Security Awareness Month.","type":"text"}]},{"type":"paragraph","content":[{"text":"Over the next 3 weeks, I’ll pop in with tips, reminders and tools to help you be as prepared as you can be for the coming month.","type":"text"}]},{"type":"paragraph","content":[{"text":"In this first episode, I want to focus on three things:","type":"text"}]},{"type":"paragraph"},{"type":"orderedList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"📉","type":"text"},{"text":" Before you start this journey, it’s important that you’ve assessed your","type":"text"},{"text":" cultural maturity ","type":"text","marks":[{"type":"bold"}]},{"text":"and the risks it points to. Decide which behaviours need to change, what ‘better’ looks like, and which teams need the most attention. If you haven’t done this already, loop back and do it NOW to give yourself a foundation for what comes next.","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"🎯","type":"text"},{"text":" SoSafe has already built a set of ","type":"text"},{"text":"content","type":"text","marks":[{"type":"bold"}]},{"text":" for you: ","type":"text"},{"text":"sosafe-awareness.com/ecsm-2026","type":"text","marks":[{"type":"link","attrs":{"href":"https://sosafe-awareness.com/ecsm-2026/"}}]},{"text":". It has four weeks of awareness content covering Phishing, Voice Scams, Shadow AI and Deepfakes. If these topics overlap with your key messages, feel free to use this content.","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"📣","type":"text"},{"text":" Free content is great, but it’s only half the solution – you need a solid ","type":"text"},{"text":"communications plan","type":"text","marks":[{"type":"bold"}]},{"text":" to drive your messaging and interactions. Following on from last week’s ‘Off The Hook’ PPT, I’ve created a ","type":"text"},{"text":"Communications Plan template","type":"text","marks":[{"type":"bold"}]},{"text":", pre-populated with some example content. ","type":"text"}]}]}]},{"type":"paragraph","content":[{"type":"hardBreak"},{"text":"The plan will drive clarity about what you are trying to achieve. Most of the columns are self-explanatory but a few deserve some explanation:","type":"text"}]},{"type":"paragraph"},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"BJ Fogg Focus","type":"text","marks":[{"type":"bold"}]},{"text":" - Highlights the specific behaviour-change lever that you are using in that scenario – try to ensure you cover all three for each topic!","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Mouthpiece","type":"text","marks":[{"type":"bold"}]},{"text":" - Separates content from delivery - we know that other voices often carry more credibility than the CISO, so choose deliberately for maximum impact","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Associated policy ","type":"text","marks":[{"type":"bold"}]},{"text":"- Gives you a place to record which policy covers this message, aiding in any subsequent Q&A with staff.","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Tests","type":"text","marks":[{"type":"bold"}]},{"text":" - Freeform column to record ideas for metrics that validate scope and impact of your communication. Useful to prove value when we get to November. ","type":"text"}]}]}]},{"type":"paragraph","content":[{"type":"hardBreak"},{"text":"Take the template and adapt it to your needs. I’d love to know which columns work for you, which don’t, and what you add. One thing’s certain: don’t head into October without a clear plan for every communication activity.","type":"text"}]}]},"body_plaintext":"$4f","source":"slack","edited_at":null,"version":0,"is_published":true,"file_attachments_count":2,"reactions_count":4,"comments_count":1,"slack_message":{"id":"5fa61702-57e8-4339-969c-2eaff7e1400a","message_ts":"1788856880.138439","blocks":[{"type":"rich_text","block_id":"9Rsv4","elements":[{"type":"rich_text_section","elements":[{"text":"European Cyber Security Month - Planning The Delivery","type":"text","style":{"bold":true}},{"text":"\n\n","type":"text"},{"type":"broadcast","range":"channel"},{"text":" October is nearly here! It’s the pinnacle moment in many of our programmes, when we get permission to push our message harder than ever across Security Awareness Month.\n\nOver the next 3 weeks, I’ll pop in with tips, reminders and tools to help you be as prepared as you can be for the coming month.\n\nIn this first episode, I want to focus on three things:\n\n","type":"text"}]},{"type":"rich_text_list","style":"ordered","border":0,"indent":0,"elements":[{"type":"rich_text_section","elements":[{"name":"chart_with_downwards_trend","type":"emoji","unicode":"1f4c9"},{"text":" Before you start this journey, it’s important that you’ve assessed your","type":"text"},{"text":" cultural maturity ","type":"text","style":{"bold":true}},{"text":"and the risks it points to. Decide which behaviours need to change, what ‘better’ looks like, and which teams need the most attention. If you haven’t done this already, loop back and do it NOW to give yourself a foundation for what comes next.","type":"text"}]},{"type":"rich_text_section","elements":[{"name":"dart","type":"emoji","unicode":"1f3af"},{"text":" SoSafe has already built a set of ","type":"text"},{"text":"content","type":"text","style":{"bold":true}},{"text":" for you: ","type":"text"},{"url":"https://sosafe-awareness.com/ecsm-2026/","text":"sosafe-awareness.com/ecsm-2026","type":"link","truncated":true},{"text":". It has four weeks of awareness content covering Phishing, Voice Scams, Shadow AI and Deepfakes. If these topics overlap with your key messages, feel free to use this content.","type":"text"}]},{"type":"rich_text_section","elements":[{"name":"mega","type":"emoji","unicode":"1f4e3"},{"text":" Free content is great, but it’s only half the solution – you need a solid ","type":"text"},{"text":"communications plan","type":"text","style":{"bold":true}},{"text":" to drive your messaging and interactions. Following on from last week’s ‘Off The Hook’ PPT, I’ve created a ","type":"text"},{"text":"Communications Plan template","type":"text","style":{"bold":true}},{"text":", pre-populated with some example content. ","type":"text"}]}]},{"type":"rich_text_section","elements":[{"text":"\nThe plan will drive clarity about what you are trying to achieve. Most of the columns are self-explanatory but a few deserve some explanation:\n\n","type":"text"}]},{"type":"rich_text_list","style":"bullet","border":0,"indent":0,"elements":[{"type":"rich_text_section","elements":[{"text":"BJ Fogg Focus","type":"text","style":{"bold":true}},{"text":" - Highlights the specific behaviour-change lever that you are using in that scenario – try to ensure you cover all three for each topic!","type":"text"}]},{"type":"rich_text_section","elements":[{"text":"Mouthpiece","type":"text","style":{"bold":true}},{"text":" - Separates content from delivery - we know that other voices often carry more credibility than the CISO, so choose deliberately for maximum impact","type":"text"}]},{"type":"rich_text_section","elements":[{"text":"Associated policy ","type":"text","style":{"bold":true}},{"text":"- Gives you a place to record which policy covers this message, aiding in any subsequent Q&A with staff.","type":"text"}]},{"type":"rich_text_section","elements":[{"text":"Tests","type":"text","style":{"bold":true}},{"text":" - Freeform column to record ideas for metrics that validate scope and impact of your communication. Useful to prove value when we get to November. ","type":"text"}]}]},{"type":"rich_text_section","elements":[{"text":"\nTake the template and adapt it to your needs. I’d love to know which columns work for you, which don’t, and what you add. One thing’s certain: don’t head into October without a clear plan for every communication activity.","type":"text"}]}]}],"markdown":"$50","permalink":"https://hufileaders-community.slack.com/archives/C08T8KVNEF2/p1788856880138439?thread_ts=1788856880.138439&cid=C08T8KVNEF2","parent_slack_message_id":null,"username":null,"icon":null,"is_shared":false},"cover_image_file_id":"9b22b24f-3b04-4432-a6d1-6c5a79a8b934","cover_image_url":"https://pthsiwxwiiowghdtkwlv.supabase.co/storage/v1/object/public/slack_files/T08SMTNHW7L/93fdaeb1-4ea5-4afe-8ed2-72cfe4ee026d/F0C0CECG9NY/ECSM_Planning%20the%20Delivery_1.png","author":{"id":"93fdaeb1-4ea5-4afe-8ed2-72cfe4ee026d","preferred_name":"Andrew R.","preferred_image_original":"https://avatars.slack-edge.com/2026-04-28/11011665146546_1a2e89ecd0ad36ba89ce_original.jpg","preferred_image_1024":"https://avatars.slack-edge.com/2026-04-28/11011665146546_1a2e89ecd0ad36ba89ce_1024.jpg","preferred_image_512":"https://avatars.slack-edge.com/2026-04-28/11011665146546_1a2e89ecd0ad36ba89ce_512.jpg","preferred_image_192":"https://avatars.slack-edge.com/2026-04-28/11011665146546_1a2e89ecd0ad36ba89ce_192.jpg","preferred_image_72":"https://avatars.slack-edge.com/2026-04-28/11011665146546_1a2e89ecd0ad36ba89ce_72.jpg","preferred_image_48":"https://avatars.slack-edge.com/2026-04-28/11011665146546_1a2e89ecd0ad36ba89ce_48.jpg","preferred_image_32":"https://avatars.slack-edge.com/2026-04-28/11011665146546_1a2e89ecd0ad36ba89ce_32.jpg","preferred_image_24":"https://avatars.slack-edge.com/2026-04-28/11011665146546_1a2e89ecd0ad36ba89ce_24.jpg","slack_profile_id":"U0B09HE1SBG","is_team_member":false,"slack_profile":{"id":"U0B09HE1SBG","is_admin":false,"is_bot":false,"is_forgotten":false,"deleted":false},"group_flair":null},"best_answer_message_id":null,"selected_answer_message_ids":[],"selected_answer_count":0,"feed":{"id":"6ed890b7-4027-4dcc-93a0-0c4a367f22bf","public_id":"feed_M19AZrcoIUgN","label":"03_best-practices","slug":"03best-practices","is_posting_from_site_allowed":true,"allow_selected_answer":false,"visibility":"public"},"references":{"mentioned_slack_users":[],"mentioned_slack_channels":[],"custom_emojis":[],"urls":[{"url":"https://sosafe-awareness.com/ecsm-2026/","is_image":false,"is_video":false,"order_seen":0,"is_embedded_media":false}]}},{"id":"ny88f72cjgpi","message_id":"msg_gj2KxNG9o2nh","created_at":"2026-09-03T06:48:49.193802+00:00","content_created_at":"2026-09-03T06:48:45.502+00:00","latest_activity_at":"2026-09-08T08:59:36.469+00:00","title":"Off the Hook: Addressing Phone Addiction and Meta’s Landmark Legal Settlement","slug":"off-the-hook-addressing-phone-addiction-and-metas","description":"Explore practical steps to manage phone addiction and learn about Meta’s $18 billion legal settlement addressing social media’s impact on teens.","feed_id":"6ed890b7-4027-4dcc-93a0-0c4a367f22bf","post_detail_display_format":"discussion","author_profile_id":"93fdaeb1-4ea5-4afe-8ed2-72cfe4ee026d","body_prosemirror":{"type":"doc","content":[{"type":"paragraph","content":[{"text":"Off the Hook – Phone addiction and Meta’s legal settlement ","type":"text","marks":[{"type":"bold"}]}]},{"type":"paragraph","content":[{"text":"@channel","type":"text"},{"text":" As our summer breaks start to end, many of us have had a front-row seat to something that’s been hard to ignore: our family’s, and our own, relationship with social media/phones ","type":"text"},{"text":"📱","type":"text"},{"text":". The unstructured days of the school holidays ","type":"text"},{"text":"🏖️","type":"text"},{"text":" strip away routines that normally keep phone use in check, and for many households the result has been a summer of near-constant scrolling, gaming, and notification-chasing. Whether it was watching a teenager disappear into TikTok for hours, or catching yourself reaching for your phone when there's a lull in conversation, the pattern is familiar: apps engineered to be irresistible, delivering just enough reward to keep us coming back ","type":"text"},{"text":"📲","type":"text"},{"text":".","type":"text"}]},{"type":"paragraph","content":[{"text":"Interestingly, this isn't simply a matter of willpower. This same topic has been the subject of serious legal scrutiny in the US. You may know that Meta ","type":"text"},{"text":"♾️","type":"text"},{"text":" recently agreed a ","type":"text"},{"text":"landmark settlement","type":"text","marks":[{"type":"link","attrs":{"href":"https://www.bbc.co.uk/news/articles/cd68q3wynnqo"}}]},{"text":" worth around $18 billion, resolving claims that it knowingly designed Facebook and Instagram to be addictive, and that they misrepresented the harm this caused to children's ","type":"text"},{"text":"mental health","type":"text","marks":[{"type":"link","attrs":{"href":"https://www.psychologytoday.com/us/blog/psychology-through-technology/202512/why-is-social-media-harmful-to-children-and-teens"}}]},{"text":". As part of the deal, Meta committed to daily usage limits and \"nighttime blocks\" for teenage users, stronger age-verification measures, and new tools to help parents manage their children's use of its platforms. Although they deny any wrongdoing, these changes are an acknowledgment that social media products need guardrails & regulation, not just goodwill & best endeavours.","type":"text"}]},{"type":"paragraph","content":[{"text":"This is a useful reminder for us all: if the platforms themselves are being required to build in friction and limits, there's a strong case for doing the same at home*.","type":"text"}]},{"type":"paragraph","content":[{"text":"If this is a topic you think your user base could be interested in, I have g","type":"text"},{"text":"ood news ","type":"text","marks":[{"type":"underline"}]},{"text":"🥳","type":"text"},{"text":"! This week, I’ve created a ","type":"text"},{"text":"handout","type":"text","marks":[{"type":"bold"}]},{"text":" that you can use to within your own organisations.","type":"text"}]},{"type":"paragraph","content":[{"text":"The handout, ‘Off the Hook’, sets out six practical steps to help you and your family regain control over phone habits as the new school year begins. The goal isn't to demonise technology, but to try to break the automatic reflexes, and to do it as a household, with everyone's buy-in.","type":"text"}]},{"type":"paragraph","content":[{"text":"Feel free to brand, revise and utilise this handout if you think it could be of value, either in parallel to communication about the Meta court case, or as part of your plans for October’s awareness month.","type":"text"}]},{"type":"paragraph","content":[{"text":"* interestingly, in ‘Careless People’ (a book written about Meta by an internal whistleblower) it was highlighted that senior members of the Meta leadership team were very strict about their own children having no, or very limited, access to social media platforms… make of that what you will…","type":"text","marks":[{"type":"italic"}]},{"text":"🤨","type":"text"}]}]},"body_plaintext":"$51","source":"slack","edited_at":"2026-09-03T06:51:28.407+00:00","version":2,"is_published":true,"file_attachments_count":2,"reactions_count":2,"comments_count":1,"slack_message":{"id":"2796d0bc-2dea-4715-9607-19dee8be96de","message_ts":"1788418125.502749","blocks":[{"type":"rich_text","block_id":"YGXHb","elements":[{"type":"rich_text_section","elements":[{"text":"Off the Hook – Phone addiction and Meta’s legal settlement ","type":"text","style":{"bold":true}},{"text":"\n\n","type":"text"},{"type":"broadcast","range":"channel"},{"text":" As our summer breaks start to end, many of us have had a front-row seat to something that’s been hard to ignore: our family’s, and our own, relationship with social media/phones ","type":"text"},{"name":"iphone","type":"emoji","unicode":"1f4f1"},{"text":". The unstructured days of the school holidays ","type":"text"},{"name":"beach_with_umbrella","type":"emoji","unicode":"1f3d6-fe0f"},{"text":" strip away routines that normally keep phone use in check, and for many households the result has been a summer of near-constant scrolling, gaming, and notification-chasing. Whether it was watching a teenager disappear into TikTok for hours, or catching yourself reaching for your phone when there's a lull in conversation, the pattern is familiar: apps engineered to be irresistible, delivering just enough reward to keep us coming back ","type":"text"},{"name":"calling","type":"emoji","unicode":"1f4f2"},{"text":".\n\nInterestingly, this isn't simply a matter of willpower. This same topic has been the subject of serious legal scrutiny in the US. You may know that Meta ","type":"text"},{"name":"infinity","type":"emoji","unicode":"267e-fe0f"},{"text":" recently agreed a ","type":"text"},{"url":"https://www.bbc.co.uk/news/articles/cd68q3wynnqo","text":"landmark settlement","type":"link"},{"text":" worth around $18 billion, resolving claims that it knowingly designed Facebook and Instagram to be addictive, and that they misrepresented the harm this caused to children's ","type":"text"},{"url":"https://www.psychologytoday.com/us/blog/psychology-through-technology/202512/why-is-social-media-harmful-to-children-and-teens","text":"mental health","type":"link"},{"text":". As part of the deal, Meta committed to daily usage limits and \"nighttime blocks\" for teenage users, stronger age-verification measures, and new tools to help parents manage their children's use of its platforms. Although they deny any wrongdoing, these changes are an acknowledgment that social media products need guardrails & regulation, not just goodwill & best endeavours.\n\nThis is a useful reminder for us all: if the platforms themselves are being required to build in friction and limits, there's a strong case for doing the same at home*.\n\nIf this is a topic you think your user base could be interested in, I have g","type":"text"},{"text":"ood news ","type":"text","style":{"underline":true}},{"name":"partying_face","type":"emoji","style":{"underline":true},"unicode":"1f973"},{"text":"! This week, I’ve created a ","type":"text"},{"text":"handout","type":"text","style":{"bold":true}},{"text":" that you can use to within your own organisations.\n\nThe handout, ‘Off the Hook’, sets out six practical steps to help you and your family regain control over phone habits as the new school year begins. The goal isn't to demonise technology, but to try to break the automatic reflexes, and to do it as a household, with everyone's buy-in.\n\nFeel free to brand, revise and utilise this handout if you think it could be of value, either in parallel to communication about the Meta court case, or as part of your plans for October’s awareness month.\n\n","type":"text"},{"text":"* interestingly, in ‘Careless People’ (a book written about Meta by an internal whistleblower) it was highlighted that senior members of the Meta leadership team were very strict about their own children having no, or very limited, access to social media platforms… make of that what you will…","type":"text","style":{"italic":true}},{"name":"face_with_raised_eyebrow","type":"emoji","style":{"italic":true},"unicode":"1f928"}]}]}],"markdown":"$52","permalink":"https://hufileaders-community.slack.com/archives/C08T8KVNEF2/p1788418125502749?thread_ts=1788418125.502749&cid=C08T8KVNEF2","parent_slack_message_id":null,"username":null,"icon":null,"is_shared":false},"cover_image_file_id":"3a28b7b9-8079-43fc-8faf-ed337adc08ce","cover_image_url":"https://pthsiwxwiiowghdtkwlv.supabase.co/storage/v1/object/public/slack_files/T08SMTNHW7L/93fdaeb1-4ea5-4afe-8ed2-72cfe4ee026d/F0C0388B3T2/Off%20the%20Hook%20Ambassador%20Post.png","author":{"id":"93fdaeb1-4ea5-4afe-8ed2-72cfe4ee026d","preferred_name":"Andrew R.","preferred_image_original":"https://avatars.slack-edge.com/2026-04-28/11011665146546_1a2e89ecd0ad36ba89ce_original.jpg","preferred_image_1024":"https://avatars.slack-edge.com/2026-04-28/11011665146546_1a2e89ecd0ad36ba89ce_1024.jpg","preferred_image_512":"https://avatars.slack-edge.com/2026-04-28/11011665146546_1a2e89ecd0ad36ba89ce_512.jpg","preferred_image_192":"https://avatars.slack-edge.com/2026-04-28/11011665146546_1a2e89ecd0ad36ba89ce_192.jpg","preferred_image_72":"https://avatars.slack-edge.com/2026-04-28/11011665146546_1a2e89ecd0ad36ba89ce_72.jpg","preferred_image_48":"https://avatars.slack-edge.com/2026-04-28/11011665146546_1a2e89ecd0ad36ba89ce_48.jpg","preferred_image_32":"https://avatars.slack-edge.com/2026-04-28/11011665146546_1a2e89ecd0ad36ba89ce_32.jpg","preferred_image_24":"https://avatars.slack-edge.com/2026-04-28/11011665146546_1a2e89ecd0ad36ba89ce_24.jpg","slack_profile_id":"U0B09HE1SBG","is_team_member":false,"slack_profile":{"id":"U0B09HE1SBG","is_admin":false,"is_bot":false,"is_forgotten":false,"deleted":false},"group_flair":null},"best_answer_message_id":null,"selected_answer_message_ids":[],"selected_answer_count":0,"feed":{"id":"6ed890b7-4027-4dcc-93a0-0c4a367f22bf","public_id":"feed_M19AZrcoIUgN","label":"03_best-practices","slug":"03best-practices","is_posting_from_site_allowed":true,"allow_selected_answer":false,"visibility":"public"},"references":{"mentioned_slack_users":[],"mentioned_slack_channels":[],"custom_emojis":[],"urls":[{"url":"https://www.bbc.co.uk/news/articles/cd68q3wynnqo","is_image":false,"is_video":false,"order_seen":0,"is_embedded_media":false},{"url":"https://www.psychologytoday.com/us/blog/psychology-through-technology/202512/why-is-social-media-harmful-to-children-and-teens","is_image":false,"is_video":false,"order_seen":1,"is_embedded_media":false}]}},{"id":"8w28d64xyz8e","message_id":"msg_3TcoTbwm7c24","created_at":"2026-09-01T14:27:40.82433+00:00","content_created_at":"2026-09-01T14:27:35.867+00:00","latest_activity_at":"2026-09-01T14:27:35.867+00:00","title":"Urgent: Microsoft Exchange Vulnerability Affects 85% of German Servers – Immediate Patch Needed","slug":"urgent-microsoft-exchange-vulnerability-affects-85","description":"A critical Microsoft Exchange vulnerability threatens mailbox security for many German on-premise servers; urgent patching is advised.","feed_id":"5b7feeba-8b21-4800-9367-02f765e79fac","post_detail_display_format":"discussion","author_profile_id":"93fdaeb1-4ea5-4afe-8ed2-72cfe4ee026d","body_prosemirror":{"type":"doc","content":[{"type":"paragraph","content":[{"text":"Signal Watch | MSFT Exchange Vulnerability - GERMAN USERS PLEASE READ","type":"text","marks":[{"type":"bold"}]}]},{"type":"paragraph","content":[{"text":"@channel","type":"text"},{"text":" For those us us still running MSFT Exchange servers (and there's a LOT in Germany!), it's important to note that a recent vulnerability now has exploit code available that will allow attackers to take over the mailboxes of all users, send emails, read emails, & download attachments.","type":"text"}]},{"type":"paragraph","content":[{"text":"🔑","type":"text"},{"text":" Germany's Federal Office for Information Security (BSI) ","type":"text"},{"text":"warned","type":"text","marks":[{"type":"link","attrs":{"href":"https://social.bund.de/@certbund/117171896801475447"}}]},{"text":" that around ","type":"text"},{"text":"85%","type":"text","marks":[{"type":"underline"}]},{"text":" of all on-premise Exchange servers in ","type":"text"},{"text":"Germany","type":"text","marks":[{"type":"bold"}]},{"text":" are still vulnerable to this vulnerability ","type":"text"},{"text":"😬","type":"text"}]},{"type":"paragraph","content":[{"text":"Please take note of this and chase your IT department to patch these issues ASAP!","type":"text"}]},{"type":"paragraph","content":[{"text":"bleepingcomputer.com/news/security/nearly-22-000-microsoft-exchange-servers-vulnerable-to-hijack-attacks","type":"text","marks":[{"type":"link","attrs":{"href":"https://www.bleepingcomputer.com/news/security/nearly-22-000-microsoft-exchange-servers-vulnerable-to-hijack-attacks/"}}]}]}]},"body_plaintext":"Signal Watch | MSFT Exchange Vulnerability - GERMAN USERS PLEASE READ\n\n@channel For those us us still running MSFT Exchange servers (and there's a LOT in Germany!), it's important to note that a recent vulnerability now has exploit code available that will allow attackers to take over the mailboxes of all users, send emails, read emails, & download attachments.\n\n🔑 Germany's Federal Office for Information Security (BSI) warned (https://social.bund.de/@certbund/117171896801475447) that around 85% of all on-premise Exchange servers in Germany are still vulnerable to this vulnerability 😬\n\nPlease take note of this and chase your IT department to patch these issues ASAP!\n\n\nbleepingcomputer.com/news/security/nearly-22-000-microsoft-exchange-servers-vulnerable-to-hijack-attacks (https://www.bleepingcomputer.com/news/security/nearly-22-000-microsoft-exchange-servers-vulnerable-to-hijack-attacks/)","source":"slack","edited_at":null,"version":0,"is_published":true,"file_attachments_count":1,"reactions_count":3,"comments_count":0,"slack_message":{"id":"9de791ae-ab2f-4402-a6dd-72c2a4707afd","message_ts":"1788272855.867709","blocks":[{"type":"rich_text","block_id":"g0JL5","elements":[{"type":"rich_text_section","elements":[{"text":"Signal Watch | MSFT Exchange Vulnerability - GERMAN USERS PLEASE READ","type":"text","style":{"bold":true}},{"text":"\n\n","type":"text"},{"type":"broadcast","range":"channel"},{"text":" For those us us still running MSFT Exchange servers (and there's a LOT in Germany!), it's important to note that a recent vulnerability now has exploit code available that will allow attackers to take over the mailboxes of all users, send emails, read emails, & download attachments.\n\n","type":"text"},{"name":"key","type":"emoji","unicode":"1f511"},{"text":" Germany's Federal Office for Information Security (BSI) ","type":"text"},{"url":"https://social.bund.de/@certbund/117171896801475447","text":"warned","type":"link"},{"text":" that around ","type":"text"},{"text":"85%","type":"text","style":{"underline":true}},{"text":" of all on-premise Exchange servers in ","type":"text"},{"text":"Germany","type":"text","style":{"bold":true}},{"text":" are still vulnerable to this vulnerability ","type":"text"},{"name":"grimacing","type":"emoji","unicode":"1f62c"},{"text":"\n\nPlease take note of this and chase your IT department to patch these issues ASAP!\n\n\n","type":"text"},{"url":"https://www.bleepingcomputer.com/news/security/nearly-22-000-microsoft-exchange-servers-vulnerable-to-hijack-attacks/","text":"bleepingcomputer.com/news/security/nearly-22-000-microsoft-exchange-servers-vulnerable-to-hijack-attacks","type":"link","unsafe":true,"truncated":true}]}]}],"markdown":"*Signal Watch | MSFT Exchange Vulnerability - GERMAN USERS PLEASE READ*\n\n For those us us still running MSFT Exchange servers (and there's a LOT in Germany!), it's important to note that a recent vulnerability now has exploit code available that will allow attackers to take over the mailboxes of all users, send emails, read emails, & download attachments.\n\n:key: Germany's Federal Office for Information Security (BSI) that around 85% of all on-premise Exchange servers in *Germany* are still vulnerable to this vulnerability :grimacing:\n\nPlease take note of this and chase your IT department to patch these issues ASAP!\n\n\n","permalink":"https://hufileaders-community.slack.com/archives/C08SGHA7RE3/p1788272855867709?thread_ts=1788272855.867709&cid=C08SGHA7RE3","parent_slack_message_id":null,"username":null,"icon":null,"is_shared":false},"cover_image_file_id":"af55a945-0d53-45cd-a9fe-399715b6f769","cover_image_url":"https://pthsiwxwiiowghdtkwlv.supabase.co/storage/v1/object/public/slack_files/T08SMTNHW7L/93fdaeb1-4ea5-4afe-8ed2-72cfe4ee026d/F0BV09YQT2L/Screenshot%202026-09-01%20at%2015.21.15.png","author":{"id":"93fdaeb1-4ea5-4afe-8ed2-72cfe4ee026d","preferred_name":"Andrew R.","preferred_image_original":"https://avatars.slack-edge.com/2026-04-28/11011665146546_1a2e89ecd0ad36ba89ce_original.jpg","preferred_image_1024":"https://avatars.slack-edge.com/2026-04-28/11011665146546_1a2e89ecd0ad36ba89ce_1024.jpg","preferred_image_512":"https://avatars.slack-edge.com/2026-04-28/11011665146546_1a2e89ecd0ad36ba89ce_512.jpg","preferred_image_192":"https://avatars.slack-edge.com/2026-04-28/11011665146546_1a2e89ecd0ad36ba89ce_192.jpg","preferred_image_72":"https://avatars.slack-edge.com/2026-04-28/11011665146546_1a2e89ecd0ad36ba89ce_72.jpg","preferred_image_48":"https://avatars.slack-edge.com/2026-04-28/11011665146546_1a2e89ecd0ad36ba89ce_48.jpg","preferred_image_32":"https://avatars.slack-edge.com/2026-04-28/11011665146546_1a2e89ecd0ad36ba89ce_32.jpg","preferred_image_24":"https://avatars.slack-edge.com/2026-04-28/11011665146546_1a2e89ecd0ad36ba89ce_24.jpg","slack_profile_id":"U0B09HE1SBG","is_team_member":false,"slack_profile":{"id":"U0B09HE1SBG","is_admin":false,"is_bot":false,"is_forgotten":false,"deleted":false},"group_flair":null},"best_answer_message_id":null,"selected_answer_message_ids":[],"selected_answer_count":0,"feed":{"id":"5b7feeba-8b21-4800-9367-02f765e79fac","public_id":"feed_sP8tAtdXTgQn","label":"01_news","slug":"01news","is_posting_from_site_allowed":true,"allow_selected_answer":false,"visibility":"public"},"references":{"mentioned_slack_users":[],"mentioned_slack_channels":[],"custom_emojis":[],"urls":[{"url":"https://social.bund.de/@certbund/117171896801475447","is_image":false,"is_video":false,"order_seen":0,"is_embedded_media":false},{"url":"https://www.bleepingcomputer.com/news/security/nearly-22-000-microsoft-exchange-servers-vulnerable-to-hijack-attacks/","is_image":false,"is_video":false,"order_seen":1,"is_embedded_media":false}]}},{"id":"h6ufar5vd18t","message_id":"msg_3dPTzKuJHUIL","created_at":"2026-08-20T08:03:16.348958+00:00","content_created_at":"2026-08-20T08:03:13.655+00:00","latest_activity_at":"2026-09-01T07:25:58.244+00:00","title":"Building Trust Between IT Security Teams and Users: Key Strategies for Success","slug":"building-trust-between-it-security-teams-and-users","description":"Learn how IT and Security teams can build trust with users through reciprocity, consistency, and psychological safety to improve engagement.","feed_id":"6ed890b7-4027-4dcc-93a0-0c4a367f22bf","post_detail_display_format":"discussion","author_profile_id":"93fdaeb1-4ea5-4afe-8ed2-72cfe4ee026d","body_prosemirror":{"type":"doc","content":[{"type":"paragraph","content":[{"text":"Trust Me, I'm From IT!","type":"text","marks":[{"type":"bold"}]}]},{"type":"paragraph","content":[{"text":"@channel","type":"text"},{"text":" In preparation for my session at SoSafe Academy earlier this week, I was creating content about how to establish trust between the CISO and the Board. It made me ponder the benefits of trust on a wider scale.","type":"text"}]},{"type":"paragraph","content":[{"text":"It’s an awkward truth, but the IT team is often the least trusted voice in the building","type":"text"},{"text":"👨‍💻","type":"text"},{"text":". They show up uninvited, tell people they're doing it wrong, disrupt working flow, and then vanish leaving staff confused and irritated. That’s an issue in itself, but what’s worse is that Security is often perceived as just another part of IT!","type":"text"}]},{"type":"paragraph","content":[{"text":"Is it any wonder therefore, that our messages struggle to get through? ","type":"text"},{"text":"🙉","type":"text"}]},{"type":"paragraph","content":[{"text":"Trust is a mental shortcut our brains use to decide who's worth listening to under pressure, and who’s opinions have value. We judge advice by how we feel about the messenger, not simply the merits of the message.","type":"text"}]},{"type":"paragraph","content":[{"text":"This technique is used by attackers all the time - look at the 2023 MGM Resorts breach for example. Attackers didn't crack any encryption - they simply rang the IT help desk, sounded confident, and asked for a password reset. The help desk trusted the caller's tone and basic authentication over any advanced verification process. That's authority bias, social proof & years of training a ‘help desk’ to help, working exactly as evolution intended, just weaponised against us. If attackers can build trust in five minutes on the phone, we can surely build genuine trust with our own colleagues.","type":"text"}]},{"type":"paragraph","content":[{"text":"So how can we build trust with our user base instead? Three behavioural levers:","type":"text"}]},{"type":"paragraph"},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"🔄","type":"text"},{"text":" Reciprocity - ","type":"text","marks":[{"type":"bold"}]},{"text":"always be looking to help. I used to tell my team that the answer to any user request was always “Yes”, we just needed to figure out how to say yes safely. Look for opportunities to add value and make the users life easier. Once you are perceived to be ‘on their side’, things will get much easier.","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"📶","type":"text"},{"text":" Consistency - ","type":"text","marks":[{"type":"bold"}]},{"text":"as German (& British!) rail commuters know, it’s difficult to trust a service that is inconsistent. By always having the same helpful response, by showing up every time, by always being calm, regardless of cause, you will become much more approachable to staff. Which leads onto…","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"🆘","type":"text"},{"text":" Psychological safety - ","type":"text","marks":[{"type":"bold"}]},{"text":"remove the risk, blame and finger pointing from any engagement.","type":"text"},{"text":" ","type":"text","marks":[{"type":"bold"}]},{"text":"Reward the person who reports \"I think I clicked something,\" fast, publicly, and warmly. That single cultural signal does more for security than any awareness poster you can print.","type":"text"}]}]}]},{"type":"paragraph","content":[{"type":"hardBreak"},{"text":"Trust isn't earned through authority; it's earned through repeated, low-stakes proof that we're on the user’s side. It will spread slowly, user by user, as each one encounters a reason to trust you, so be the colleague who always helps, not the department that judges — and watch engagement follow.","type":"text"}]},{"type":"paragraph","content":[{"text":"Talking Points","type":"text","marks":[{"type":"bold"}]},{"type":"hardBreak"},{"text":"1. Do you have any metric tracking trust levels? If so, what does that look like?","type":"text"},{"type":"hardBreak"},{"text":"2. What’s the one thing your department has done that made the biggest difference to how much the user base trust the Security function?","type":"text"}]}]},"body_plaintext":"$53","source":"slack","edited_at":"2026-08-28T09:20:32.515+00:00","version":1,"is_published":true,"file_attachments_count":1,"reactions_count":3,"comments_count":2,"slack_message":{"id":"45d7a11e-7009-4511-ace6-662ab7cf978a","message_ts":"1787212993.655399","blocks":[{"type":"rich_text","block_id":"6O3pv","elements":[{"type":"rich_text_section","elements":[{"text":"Trust Me, I'm From IT!","type":"text","style":{"bold":true}},{"text":"\n\n","type":"text"},{"type":"broadcast","range":"channel"},{"text":" In preparation for my session at SoSafe Academy earlier this week, I was creating content about how to establish trust between the CISO and the Board. It made me ponder the benefits of trust on a wider scale.\n\nIt’s an awkward truth, but the IT team is often the least trusted voice in the building","type":"text"},{"name":"male-technologist","type":"emoji","unicode":"1f468-200d-1f4bb"},{"text":". They show up uninvited, tell people they're doing it wrong, disrupt working flow, and then vanish leaving staff confused and irritated. That’s an issue in itself, but what’s worse is that Security is often perceived as just another part of IT!\n\nIs it any wonder therefore, that our messages struggle to get through? ","type":"text"},{"name":"hear_no_evil","type":"emoji","unicode":"1f649"},{"text":"\n\nTrust is a mental shortcut our brains use to decide who's worth listening to under pressure, and who’s opinions have value. We judge advice by how we feel about the messenger, not simply the merits of the message.\n\nThis technique is used by attackers all the time - look at the 2023 MGM Resorts breach for example. Attackers didn't crack any encryption - they simply rang the IT help desk, sounded confident, and asked for a password reset. The help desk trusted the caller's tone and basic authentication over any advanced verification process. That's authority bias, social proof & years of training a ‘help desk’ to help, working exactly as evolution intended, just weaponised against us. If attackers can build trust in five minutes on the phone, we can surely build genuine trust with our own colleagues.\n\nSo how can we build trust with our user base instead? Three behavioural levers:\n\n","type":"text"}]},{"type":"rich_text_list","style":"bullet","border":0,"indent":0,"elements":[{"type":"rich_text_section","elements":[{"name":"arrows_counterclockwise","type":"emoji","style":{"bold":true},"unicode":"1f504"},{"text":" Reciprocity - ","type":"text","style":{"bold":true}},{"text":"always be looking to help. I used to tell my team that the answer to any user request was always “Yes”, we just needed to figure out how to say yes safely. Look for opportunities to add value and make the users life easier. Once you are perceived to be ‘on their side’, things will get much easier.","type":"text"}]},{"type":"rich_text_section","elements":[{"name":"signal_strength","type":"emoji","style":{"bold":true},"unicode":"1f4f6"},{"text":" Consistency - ","type":"text","style":{"bold":true}},{"text":"as German (& British!) rail commuters know, it’s difficult to trust a service that is inconsistent. By always having the same helpful response, by showing up every time, by always being calm, regardless of cause, you will become much more approachable to staff. Which leads onto…","type":"text"}]},{"type":"rich_text_section","elements":[{"name":"sos","type":"emoji","style":{"bold":true},"unicode":"1f198"},{"text":" Psychological safety - ","type":"text","style":{"bold":true}},{"text":"remove the risk, blame and finger pointing from any engagement.","type":"text"},{"text":" ","type":"text","style":{"bold":true}},{"text":"Reward the person who reports \"I think I clicked something,\" fast, publicly, and warmly. That single cultural signal does more for security than any awareness poster you can print.","type":"text"}]}]},{"type":"rich_text_section","elements":[{"text":"\nTrust isn't earned through authority; it's earned through repeated, low-stakes proof that we're on the user’s side. It will spread slowly, user by user, as each one encounters a reason to trust you, so be the colleague who always helps, not the department that judges — and watch engagement follow.\n\n","type":"text"},{"text":"Talking Points","type":"text","style":{"bold":true}},{"text":"\n1. Do you have any metric tracking trust levels? If so, what does that look like?\n2. What’s the one thing your department has done that made the biggest difference to how much the user base trust the Security function?","type":"text"}]}]}],"markdown":"$54","permalink":"https://hufileaders-community.slack.com/archives/C08T8KVNEF2/p1787212993655399?thread_ts=1787212993.655399&cid=C08T8KVNEF2","parent_slack_message_id":null,"username":null,"icon":null,"is_shared":false},"cover_image_file_id":"c6d9430f-5554-4932-9a9d-fbb1b8879805","cover_image_url":"https://pthsiwxwiiowghdtkwlv.supabase.co/storage/v1/object/public/slack_files/T08SMTNHW7L/93fdaeb1-4ea5-4afe-8ed2-72cfe4ee026d/F0BR170MC5D/Trust%20Me,%20Im%20From%20IT,%20Community%20Ambassador%20Thumbnail.png","author":{"id":"93fdaeb1-4ea5-4afe-8ed2-72cfe4ee026d","preferred_name":"Andrew R.","preferred_image_original":"https://avatars.slack-edge.com/2026-04-28/11011665146546_1a2e89ecd0ad36ba89ce_original.jpg","preferred_image_1024":"https://avatars.slack-edge.com/2026-04-28/11011665146546_1a2e89ecd0ad36ba89ce_1024.jpg","preferred_image_512":"https://avatars.slack-edge.com/2026-04-28/11011665146546_1a2e89ecd0ad36ba89ce_512.jpg","preferred_image_192":"https://avatars.slack-edge.com/2026-04-28/11011665146546_1a2e89ecd0ad36ba89ce_192.jpg","preferred_image_72":"https://avatars.slack-edge.com/2026-04-28/11011665146546_1a2e89ecd0ad36ba89ce_72.jpg","preferred_image_48":"https://avatars.slack-edge.com/2026-04-28/11011665146546_1a2e89ecd0ad36ba89ce_48.jpg","preferred_image_32":"https://avatars.slack-edge.com/2026-04-28/11011665146546_1a2e89ecd0ad36ba89ce_32.jpg","preferred_image_24":"https://avatars.slack-edge.com/2026-04-28/11011665146546_1a2e89ecd0ad36ba89ce_24.jpg","slack_profile_id":"U0B09HE1SBG","is_team_member":false,"slack_profile":{"id":"U0B09HE1SBG","is_admin":false,"is_bot":false,"is_forgotten":false,"deleted":false},"group_flair":null},"best_answer_message_id":null,"selected_answer_message_ids":[],"selected_answer_count":0,"feed":{"id":"6ed890b7-4027-4dcc-93a0-0c4a367f22bf","public_id":"feed_M19AZrcoIUgN","label":"03_best-practices","slug":"03best-practices","is_posting_from_site_allowed":true,"allow_selected_answer":false,"visibility":"public"},"references":{"mentioned_slack_users":[],"mentioned_slack_channels":[],"custom_emojis":[],"urls":[]}}],"count":10,"totalRecordsCount":128,"totalPagesCount":13,"hasNextPage":true},"siteLogoUrl":"https://pthsiwxwiiowghdtkwlv.supabase.co/storage/v1/object/public/slack_files/T08SMTNHW7L/c453109b-a77c-442c-8ff0-995f04accf44/F08SGFHSLEB/hflc_tightknit_logo_01.png","autoRevealFileAttachments":false,"autoLoadVideoEmbeds":true,"selectedAnswersEnabled":false}]