Education and training
Everything I've written on education and training, with the research pieces first. Each one ends with something you can do on Monday.
Dealing with one of these problems yourself? I work with organizations that need answers, not another slide deck. Let's talk.
What's in a five-angle short
Most subjects here are one page with five short sections, always in this order. Each has its own colour inside the article so you can jump to the one you need.
- 1Where I'd start: the first move I'd make, and the question I'd ask before spending anything.
- 2Where plans fail: where plans on this subject usually break, and the assumption I'd test first.
- 3Beyond the jargon: what the subject actually means once the vendor language is stripped out.
- 4What good looks like: the result that would tell you it worked, and the number I'd watch.
- 5The call leaders can't dodge: the decision leadership has to own, and what it needs on the table to make it.
-
How Do You Assess Cybersecurity Candidates Before Hiring?
Design a cybersecurity hiring assessment around real tasks, observable evidence, consistent scoring and the capabilities a candidate needs on entry.
-
How Do You Assess Cybersecurity Skills Beyond Multiple-Choice Exams?
Build defensible cybersecurity assessments with observed tasks, clear rubrics, calibrated assessors and transfer tests. Separate completion from demonstrated competence.
-
How Do You Know Cybersecurity Training Changes Job Performance?
Measure cybersecurity training through job tasks, delayed retention and fair comparisons. Separate genuine improvement from easier tests and changed tools.
-
Stop Measuring Cybersecurity Training by Who Clicked Complete
A practical approach to cybersecurity training program development: role-based curricula, exercises, measurable skills and operational results.
-
Training Completion Is Not Cybersecurity Competence
What I look at in role based cybersecurity education, the decisions it forces, and what credible evidence looks like before you spend.
-
When Should a Cybersecurity Job Require a Certification?
Decide when cybersecurity certifications should be required, preferred or replaceable by equivalent evidence. Match credential claims to the actual job.
-
A Cybersecurity Course Is Not a Learning Program
A full training calendar proves that classes happened.
-
A tabletop exercise executives will actually remember
Most tabletop exercises are a slide deck read aloud. People nod, agree the plan is fine, and leave. Then the real incident arrives and the plan isn't fine.
-
Adversary emulation education
I would not begin adversary emulation education by buying another platform or launching a large programme. I would find the boundary, the accountable owner, ...
-
Competency assessment
I would not begin competency assessment by buying another platform or launching a large programme. I would find the boundary, the accountable owner, and one ...
-
Cyber curriculum design
I would not begin cyber curriculum design by buying another platform or launching a large programme. I would find the boundary, the accountable owner, and on...
-
Cyber range development
I would not begin cyber range development by buying another platform or launching a large programme. I would find the boundary, the accountable owner, and on...
-
Cybersecurity Hiring Starts With the Work, Not the Job Title
Ask five employers what a security engineer does and you'll get five different answers. One writes detections, another reviews cloud architecture, a third ad...
-
Cybersecurity Training That Changes What People Actually Do
An employee finishes the annual cybersecurity course, answers the quiz, and gets a certificate. The dashboard turns green. Two weeks later, the same organiza...
-
Executive cyber workshops
I would not begin executive cyber workshops by buying another platform or launching a large programme. I would find the boundary, the accountable owner, and ...
-
Incident response exercises
I would not begin incident response exercises by buying another platform or launching a large programme. I would find the boundary, the accountable owner, an...
-
SOC analyst training
I would not begin SOC analyst training by buying another platform or launching a large programme. I would find the boundary, the accountable owner, and one s...
-
Skills gap analysis
I would not begin skills gap analysis by buying another platform or launching a large programme. I would find the boundary, the accountable owner, and one sc...
-
Stop Measuring Cybersecurity Training by Who Clicked Complete
A hundred percent training completion rate is an administrative achievement. It tells me people opened a course, clicked through it, and satisfied a requirem...
-
Training measurement
I would not begin training measurement by buying another platform or launching a large programme. I would find the boundary, the accountable owner, and one s...
-
Workforce development
I would not begin workforce development by buying another platform or launching a large programme. I would find the boundary, the accountable owner, and one ...
Nothing matches. Try another word, or ask me directly.