When Can You Blame The User?

David Spark hit the show floor at Black Hat 2024 to ask security professionals when it’s okay to blame the people they are trying to protect. Ultimately, blame is less important than identifying systemic issues within your organization that are causing security failures to happen. Your goal should be to change behavior; blame isn’t the best motivator.

Got feedback? Join the conversation on LinkedIn.

Huge thanks to our sponsor, Dropzone AI

Overwhelmed by alerts? Dropzone AI’s Analysts transform them into clear, actionable insights. Investigate every alert with 90% faster response times. No playbooks, no code, no prompts. Free your team to focus on real threats. Try our AI Analyst for a 3-month free trial here.
Rich Stroffolino
Rich Stroffolino is a podcaster, editor, and writer based out of Cleveland, Ohio. Since 2015, he's worked in technology news podcasting and media. He dreams of someday writing the oral history of Transmeta.