This weekend I had the honor to present at the ISSA CISO forum in San Francisco, which focused on the Human Nature of Security.   I usually find forums like these to be some of the most challenging crowds as they are facing the day to day realities of trying to change behavior.  For example, how can your awareness program compete against other required training such as privacy, sexual harassment or ethics?  How do you get doctors or lawyers to actually listen? We had some great discussions.  If you would like to get a copy of the presentation, you can download the presentation Securing The Human with notes.  In addition, this presentation is based on my two day course MGT 443: Building an Effective Awareness Program, which you can sign up for at SANS Orlando on 3-4 April.