Use Responsibly Recon Like an insider threat for Best User

Kayla Kinyon and Ali present an innovative approach to employee security awareness by adopting an insider threat reconnaissance methodology to profile organizational vulnerabilities and optimize training programs. They outline how security teams can examine their own internal user base to pinpoint high-risk behaviors and departments before adversaries do.

[03:32] The speakers explain methods for segmenting users based on risk, identifying "habitual clickers" who repeatedly fail basic phishing tests, and tracking departments with heightened exposure or privileged access, such as finance, human resources, and executive teams. Rather than relying on punitive measures, they advocate conducting empathetic, one-on-one listening sessions [10:57] to understand the friction and operational bottlenecks in daily workflows that compel employees to circumvent security controls.

[13:56] The talk details a revamped awareness model centered on high frequency, brevity, and operational realism. Instead of mandatory annual training videos, the team implemented brief, tailored micro-trainings delivered immediately following simulated attacks. Using realistic lures—including spoofed internal domains, HR announcements, and department-specific themes [16:55]—alongside a streamlined, one-click reporting button [19:53], they demonstrate how internal reconnaissance and rapid feedback achieved significant, measurable reductions in organizational phishing vulnerability.

(AI summary — Gemini Flash)