Dr. Stephanie Carter - Training Humans To Be Machines

•Download as PPTX, PDF•

0 likes•47 views

The cybersecurity industry has a very keen focus on improving security practices, processes, and procedures through effective security awareness & training; however, organizations do not meet critical success factors with security & awareness training due to training human capital to act as machines.

Business

Dr. Stephanie Carter
CISSP, CISM, CRISC, CISA
CEO/President of JDC Unleashed
Training Humans to be
Machines

Input
vs
Output
Human
• Output may be different of expectation of
input
• Input processed with thought (decision
making) usually based on environment
• Output will determine if input will be
required again
• Storage may change even if input never
changes
Machine (Information System)
• Output is matches expectation of input
• Input processed without thought; no decision
making process
• Output determines if input will change
• Storage never changes until input changes

Left Brain Right Brain
• Logic
• Reality
• Analytical
• Details to Whole
• Verbal Processing
• Emphasis on Strategy
• Imagination
• What-ifs
• Open-minded
• Whole to Details
• Visual Processing
• Emphasis on Scenario

• Visual (seeing)
• Aural (hearing, listening)
• Verbal (talking, reading)
• Physical (touching, doing)
• Logical (thinking, figuring out)
• Social (focus groups)
• Solitary (self-learning)

• Goal
• Objectives
• Standard (Policy)
• Metrics
• Critical Success Factors
• Key Performance Indicators
• Scorecards
• Penalties for Non-compliance
• Continuous Monitoring
• Reporting Metrics
• Communication Channels (Top-Down, Down-Up, Across)
• Knowledge Test (Training)
Plan to Be Effective

Make your Organization Security Aware
1. Create a Security Awareness & Training Policy
• Define security awareness & training manager
• Define minimum training requirements for all employees and
special roles
• Define minimum requirements for training
• Automation
• Require sign-in rosters
• Require signatures at conclusion of training
• Define reporting standards and timelines
• Define key performance indicators
• Define penalties for non-compliance
• Define minimum training requirements for the organization
• Require yearly read of policy with acknowledgement
signature
• Highlight standards from policy in all training sessions
2. Communicate Reporting Metrics to Organization
Create a Security Awareness & Training Plan
1. Define your organization’s security lifecycle
2. Define training objectives
3. Define types of training
• Preferably based on learning styles
4. Define training period
5. Identify success metrics and critical success factors
• What will make training effective?
• What must training possess to be effective?
• How must training be conducted to be effective?
6. Identify Key Performance Indicators
• Developed by expected results of training as an organization
• What does training do or expected to do for the
organization?
• What are the indicators that training is successful?
7. Identify Reporting Metrics
• Identify who receives what reports
• Define information to be included in each report

IT
Governance
Domains
Strategic
Alignment
Value Delivery
Performance
Measurement
Resource
Management
Risk
Management
Top Issues of IT Governance
• Alignment of IT with enterprise strategy
• Management of risk in relations to IT operations
• Delivery of business value through IT
• Management of performance of IT infrastructure
• Management of IT resources against objectives
• Management of risk relative to IT investment
ISACA, 2018

Continuous
Monitoring
Create
Track
Report
Analyze
Report(s)
Revise

This document summarizes key aspects of leading an improvement project, including some common quality improvement tools and techniques. It discusses the model for improvement, the PDSA cycle, measurement for improvement, project management elements, and ensuring successful spread and sustainability of changes. Specific topics covered include defining different types of research, audits and projects; using run charts and statistical process control; engaging stakeholders; developing driver diagrams and charters; testing small changes; and assessing factors that support long-term sustainability.

3. establishing-the-truth

Williamhillhome

This document provides guidance on understanding data from employee surveys. It recommends looking at questions with high positive, neutral, or negative scores to identify areas of strength and weakness. It also suggests comparing results to those of higher levels to benchmark performance and see if certain areas are relatively stronger or weaker. Additionally, it advises linking responses across different parts of the survey to identify overall themes in the employee experience. The document cautions against overanalyzing details and stresses the importance of moving from analysis to action planning by focusing on a few key issues that can create high impact with a reasonable effort level and setting SMART goals for improvement actions.

The art and science of managing quality

Manal Elsayed CPPS, CPHQ, CLSSBB, FISQua, DTQM

The document discusses teams and their role in quality improvement initiatives. It describes when teams are needed, the typical stages of team growth, and the responsibilities of management, the team, team leaders, facilitators, and members. It also covers topics like meeting management, techniques for team evaluation and brainstorming, and quality tools such as flowcharts, fishbone diagrams, and control charts.

Chapter 10 case articles

turnerca2

This document discusses two case studies: (1) best practices in process improvement which recommends identifying problems, choosing a cross-functional team, process mapping to identify gaps, setting goals and communicating progress; and (2) the role of statistical thinking in management which involves understanding variation, using data to guide actions, and learning workshops to evaluate processes. Statistical thinking benefits managers by viewing work as interconnected processes, understanding that variation exists, and reducing variation leads to success.

Learning Tech2019 - Performance management is broken

Tim Newham

ISO 45001 Key Implementation Steps

PECB

ISO 45001 will be the new standard concerning Occupational Health and Safety. As its publication date is approaching, the main aim of this webinar will be to provide insights on some of the key implementation steps. Additionally, the webinar explores some possible ways of transitioning from OHSAS 18001 to ISO 45001. Main points covered: • Understanding the organizations objectives • Identification of requirements for ISO 45001 implementation • The role of top management in ISO 45001implementation • The establishment of a positive and an effective safety culture within your organization • Actions to be undertaken in case of hazard identification Presenter: Eldeen Pozniak is the Director of Pozniak Safety Associates Inc. and an International Management Consultant specializing in Occupational Health and Safety. She has provided a variety of ground to executive – level multi-project management and oversight and direction of the safety management systems, program elements and organizational culture from strategic and action plans to on-site implementation. Moreover, she has a unique blend of high level strategic, business, and safety management system understanding, and specific technical safety knowledge. Link of the recorded session published on YouTube: https://youtu.be/xF5ejJFdUdw

Training needs analysis, skills auditing and training

Charles Cotter, PhD

Businessintelligence101

learnt

Decision making involves selecting a course of action from multiple alternatives. It is distinct from problem analysis, which identifies deviations from expectations. Decision making establishes objectives and chooses between alternatives, including choosing to take no action. Business intelligence transforms raw data into useful information for analysis through techniques like reporting, analytics, and data mining. It provides tools to optimize performance and supports organizational decision making. Ethical issues in information systems include threats to power structures, privacy, and social values. Organizations can develop ethics policies around individual rights, property, accountability, and quality of life.

PASS Business Analytics 2015 - Most organizations lack an approach that lets them specify their requirements for BI or for analytics more broadly. Their ability to find opportunities for, and successfully use, more advanced analytics is limited. In this session, James Taylor will introduce decision modeling with DMN, a new standards-based approach to modeling decisions. He will introduce the core concepts of the approach and show how it can be used to drive more effective requirements for BI, dashboard and analytic projects. Attendees will learn how to begin with the decision in mind, defining their BI requirements in terms of the decision-making they need to improve.

Scce webinar assessment_061316

Eric Morehead

The document summarizes a webinar on assessing compliance programs. It discusses why organizations conduct periodic assessments of their compliance programs, including regulator expectations, stakeholder expectations, and identifying risks and gaps. It also covers preparing for an assessment, including establishing goals and scope, collecting data through document reviews, surveys, interviews and focus groups. Finally, it discusses analyzing the data, reporting findings and recommendations, and generating an action plan to address recommendations. The overall purpose is to evaluate program effectiveness and identify areas for improvement.

1st Lecture.pdf

TayyabHameed15

This document provides an overview of strategic decision making and the HR analytics process. It discusses identifying problems and criteria for decision making, developing and analyzing alternatives, and applying insights. Key aspects of the HR analytics process include collecting data, measuring metrics, analyzing results, and applying findings to organizational decisions. Biases and errors in decision making are also reviewed.

Are you in control of Testing, or does Testing control you?

SQALab

- Mike Smith argues that software testing models often rely too heavily on test cases, which may not provide the best measures for control and risk management. - An effective measurement framework separates objectives from initiatives and uses a complex model of relationships rather than a simple hierarchy. This provides better traceability and the ability to cope with change. - Lessons can be learned across different domains of measurement and testing. An ideal testing model would incorporate concepts from performance management systems like the balanced scorecard to link testing to business outcomes. - Many factors influence what level of measures and targets are suitable for a given situation, but the most important thing is that the model supports analysis and decision making to maintain control.

HIT Leader 3.0 Cornerstone Boston CHIME 2015 - HIT Leader 3.0 Cornerstone: Se...

Health IT Conference – iHT2

Future HIT Leaders must be a valued strategic partner both internal and external to their organization. They should be an active participant with their C-Suite in defining the organization’s future business vision while providing sound, innovative and flexible technology strategies and solutions. As the provider’s community base expands, HIT Leaders must develop external strategic relationships to effectively support the organization’s short and long term business services. This positions the future HIT Leaders to champion technology value and benefits required to achieve organizational transformation and success. Attendees of this session will explore ways the HIT Leader 3.0 can successfully achieve technology deployment that tightly aligns with the organization’s business vision, strategy and services as well as participate as a key leader in driving the organization’s strategic vision. Learning Objectives: Explore new leadership skills and traits required of the future HIT Leaders to enable effectiveness across organizational lines and with their C-Suite peers. Discuss approaches for the future HIT Leaders to ensure that technology strategies are aligned with both current and planned organizational services in highly dynamic and changing times. Explore effective skills for the HIT Leader 3.0 in representing their organization to external customers and business associates that leads to successful achievement of the business vision and strategy while leveraging technology strategies. Russell Branzell, FCHIME, CHCIO President & CEO CHIME

Performance Improvement Approach Orientation

Isaac Munene Ntwiga,MPH

The document provides an orientation on the performance improvement approach (PIA). It defines PIA as a step-by-step methodology for identifying performance gaps and delivering solutions. The key steps include defining desired performance, assessing actual performance, analyzing root causes of gaps, and selecting interventions. Interactive examples and exercises are used to illustrate applying each step of the PIA framework.

corporate analysis

CS Gautam

This document discusses tools for strategic analysis including SWOT analysis, positioning audits, and corporate appraisals. It provides details on how to conduct a positioning audit, including identifying current issues, relevant problems, and strategic capabilities. A positioning audit seeks to understand where the organization currently stands and informs strategic choices. The document also outlines the steps and components involved in a corporate appraisal, such as analyzing management, finances, strategy, external environment, culture, and more to assess the organization's current position.

ADRP | Measurement of Success

Heurista, Co.

Metrics is a hot topic within all fundraising fields. Measurement models have been established for monitoring the work of frontline fundraisers in order to assess the variety of activities performed as well as the schedule, pace, and outcomes of those activities. With this information in hand, choices can be made about which fundraising activities are most effective in achieving the desired donor behavior, most obviously giving.

Compliance as Culture Strategy

Cornerstone OnDemand

Compliance is an essential part of HR, but it is always the bare minimum and should be assessed and analyzed as part of an overall culture strategy. Issuing a policy that says "We don't discriminate" is not the same as a comprehensive inclusion and diversity program. Following the rules and filing reports are just part of creating a work environment where compliance happens on the way to larger goals for learning, performance, and wellness. But since HR never has to make the business case for compliance, it can be a persuasive approach to larger culture initiatives. In this presentation, we survey compliance issues, who they affect, and why it's essential to see compliance as a culture issue. You will learn: - What compliance issues create risk for the organization. - What compliance issues create risk for employees. - Why people are the most important aspect of all compliance issues. - When compliance problems are symptoms instead of causes. - How to approach different compliance issues using tech, training, coaching and data. - How to make compliance an effective part of a comprehensive approach to work culture and strategy. The original webinar featured Mike Bollinger, Vice President-Thought Leadership and Advisory Services, Cornerstone OnDemand and Heather Bussing, Employment Attorney and Principal Analyst at HRExaminer.

4. Need Assessment new.pptx

Muhammadusman432680

This document discusses needs assessment in human resource development. It explains that needs assessment helps organizations identify gaps between their current and desired goals. It is a systematic process of determining these gaps to improve policies, programs, and performance. For HRD, needs assessment identifies an organization's goals and effectiveness, as well as skills gaps between employees' current and required skills. The document outlines needs assessment at the organizational, task, and person levels. It also discusses task analysis, data collection methods, person analysis, and performance appraisal in needs assessment.

How to build a winning ig ecm or rim strategy keith atteck

Keith Atteck C.Tech. ERMm

Information Governance (IG) is truly a strategic initiative of any organization. As such, the connection to organizational strategy must be made concretely. The starting point for any IG initiative must be the organization’s corporate mandate, policies and strategic directives, mission and goals. The resulting tactical elements must be aligned with the organizational plans, objectives, and the operational targets of management.

Transform Your Downstream Cloud Analytics with Data Quality

Precisely

Untrustworthy results or inaccurate insights from ML, AI, and advanced analytics systems were due to a lack of quality in the data as reported by nearly half of respondents to Precisely’s Enterprise Data Quality survey. Are you ready to improve your trust in the data your organization is using in the cloud for business decision-making? Register now to learn how to take the first steps to high-quality data in the cloud by better understanding your data through profiling. During this on-demand webinar, we will explore key topics such as: • The five key steps to effective data profiling • How profiling informs your next steps to deliver quality data to the cloud • How Precisely customers have elevated marketing and customer service results by focusing on data quality

Creating a Data Driven Culture

Core Solutions, Inc.

2015 ISACA NACACS - Audit as Controls Factory

Nathan Anderson

The presentation provides an overview of data analytics concepts and tools that can be used for internal auditing. It discusses how audit analytics can help challenge traditional audit views and provide additional services while maintaining independence. Examples are given of how analytics can be used for monitoring controls, enhancing audits, and ad-hoc analysis of risks. Key lessons focus on ensuring diversity in analytic teams and being prepared to replace personnel. The presentation emphasizes using a toolbox approach to tools and affordably sourcing analytic talent from interns with the needed skills. Maintaining independence is discussed in the context of facilitating rather than directly implementing risk responses or managing risk.

How to make the strategic planning??pptx

asmaa sakran

This document provides information on strategic planning for medical practices. It defines strategic planning as a formal process that helps an organization maintain optimal alignment with its environment. The strategic planning process involves developing goals and strategies to promote future thinking. It counters short-term thinking and helps solve major issues. An effective strategic plan includes defining the current situation, vision, goals, strategies, responsibilities, and evaluation techniques. It should be put in writing to guide implementation and monitoring of the plan.

Enterprise Search in Practice: A Presentation of Survey Results and Areas for...

Findwise

The presentation has two main focuses. First, to present some interesting and sometimes rather contradicting findings from the Enterprise Search and Findability survey 2012. Second, to introduce an holistic approach to implementing search technology involving five different aspects that are all important to succeed and to reach findability rather than just the ability to search. Presented at Gilbane Conference 2012 in Boston USA on the 28th of November by Mattias Ellison.

PI Boot Camp 2015.06 Participant Packet

Mike Rudolf

This document provides an overview of a performance improvement boot camp. It begins with an icebreaker exercise about problems with the Jefferson Memorial. It then discusses various quality improvement tools and methodologies like DMAICS, Lean Six Sigma, root cause analysis, and process mapping. The document emphasizes defining problems, collecting meaningful data, and using a structured process like DMAICS to drive improvement. It provides examples of how to measure processes, analyze data, identify issues, and implement solutions to optimize performance.

1555 track1 pelosi

Rising Media, Inc.

The document describes CenturyLink's Talent Index, which measures how effectively leaders manage talent within their organizations. Some key points: - The Talent Index is comprised of 6 factors related to talent management, such as engagement, movement/turnover, diversity, and development. It provides an overall score and scores on each factor. - The scores are calculated based on metrics in each factor area and show how organizations are performing against targets. This provides data to identify strengths and areas for improvement. - Leaders receive their scores, which have identified high performance in development but opportunities in increasing promotions and diversity. The Index has increased focus on talent goals. - Lessons included taking time to develop the Index,

High Reliability in Healthcare Webinar

MyRounding

Turning your organization into a high reliability organization just makes sense. Implementing predictable behaviors and reliable processes create a culture that strives to achieve error-free performance and safety in every procedure, every time. This increases safety and satisfaction for both patients and staff while reducing costs and improving clinical results. Join HRO expert Tony Gorski and learn steps that you can take to turn your organization into the efficient and safe environment you know it can be.

Compliance challenges in Information Security

Manas Deep

This document discusses compliance challenges in information security. It begins by introducing the author and their background in information security. The agenda outlines discussing why organizations need to comply, common compliance challenges, and solutions related to infrastructure, processes, people, and takeaways. Specific compliance challenges are then discussed in more detail relating to lack of support, participation, skills, and resistance to change. Solutions provided focus on education, standardization, communication, and accountability. The document aims to help organizations understand the value of compliance and address challenges to successfully implement new requirements.

Information Governance in the Cloud: Compare and Contrast (2020 update)

Dr. Stephanie Carter - Training Humans To Be Machines

Recommended

Recommended

More Related Content

Similar to Dr. Stephanie Carter - Training Humans To Be Machines

Similar to Dr. Stephanie Carter - Training Humans To Be Machines (20)

More from ARMA International

More from ARMA International (20)

Recently uploaded

Recently uploaded (20)

Dr. Stephanie Carter - Training Humans To Be Machines