ABOUT THIS EPISODE
Where are security tools failing security teams? What are security teams looking for when they visit a security vendor marketing website? Paul Robinson, security expert and founder of Tempus Network, says, “Over-promising and under-delivering is a major factor in these tools. The tool can look great in a demo—proof of concepts are great, but often the security vendor is just putting their best foot forward. It's not really the reality of the situation.”
Paul’s advice for how can security vendors do better?
- Start by admitting security isn’t just a switch you flip—it’s a journey.
- Security teams aren’t fooled by glitz and glamour on your marketing website. They want to see how you addressed real problems.
- Incredible customer service can make a small, scrappy cybersecurity product stand out from larger, slower-moving vendors.
- Cybersecurity vendors need to get onboarding right (it’s a make or break aspect of the user experience). There are more variables than you think—not only technology but also getting buy-in from employees, leadership, and other stakeholders.
- Think about the user experience not only of the person using the security product, but the people at the organization who will be impacted by the product.
Looking for a cybersecurity-related movie that is just a tad too plausible? Paul recommends Leave the World Behind on Netflix.
English
United States
TRANSCRIPT 🔗
Are you the producer of this podcast?
Add a podcast transcript
Need Audio-to-Text?
Transcribe with Listen411 in Just 60 Seconds
SEARCH PAST EPISODES
Search past episodes of Human-Centered Security.
OTHER EPISODES IN THIS PODCAST
In this episode, Heidi gets a taste of her own medicine and is interviewed by co-host John Robertson about her newly-released book Human-Centered Security: How to Design Systems That Are Both Safe and Usable. We talk about:
Why Heidi’s experience as a UX researcher prompted her to write Human-Cent…
The cybersecurity industry often fixates on “behavior change,” expecting users to take on unrealistic tasks instead of designing safer, smarter systems.
Matt Wallaert (founder of BeSci.io and author of Start at the End: How to Build Products that Create Change) explains behavioral science isn't ab…
In this episode, we talk about:
Security tools don’t get a free pass when it comes to involving end users as part of the design process.
People studying and building ML-based security tools make a lot of assumptions. Instead of wasting time on assumptions, why not learn from security practitione…
What do CISOs have to say about the security tools their teams use?:“When we introduce a level of complexity in the system, it undermines security. Every moment wasted trying to use a tool effectively benefits the adversary.” - Matt Stamper
In this episode, we talk to cybsecurity leaders Bill Bonne…
“Technical people need to better understand the laws and regulations and lawyers need to better understand the technology and processes in place. When that happens, when those worlds come together, that’s where you can meaningfully make things happen.” -Justine Phillips, Partner at Baker McKenzie
…
Disclaimer: The podcast and artwork embedded on this page are from Voice+Code, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.
EDIT
Thank you for helping to keep the podcast database up to date.