Leron Zinatullin (zinatullin.com) is an experienced risk consultant specialising in cyber security strategy, management and delivery. He has led large-scale, global, high-value security transformation projects with a view to improving cost performance and supporting business strategy.He has extensive knowledge and practical experience in solving information security, privacy and architectural issues across multiple industry sectors.He has an MSc in information security from University College London, where he focused on the human aspects of information security. His research was related to modelling conflicts between security compliance and human behaviour.

• 1: Introduction to Information Security2: Risk Management3: The Complexity of Risk Management4: Stakeholders and Communication5: Information Security Governance6: Problems with Policies7: How Security Managers Make Decisions8: How Users Make Decisions 9: Security and Usability10: Security Culture11: The Psychology of Compliance12: Conclusion - Changing the Approach to Security Appendix: AnalogiesAnalogy 1: Cake and SecurityAnalogy 2: Poker and Security

Leron Zinatullin (zinatullin.com) is an experienced risk consultant specialising in cyber security strategy, management and delivery. He has led large-scale, global, high-value security transformation projects with a view to improving cost performance and supporting business strategy.He has extensive knowledge and practical experience in solving information security, privacy and architectural issues across multiple industry sectors.He has an MSc in information security from University College London, where he focused on the human aspects of information security. His research was related to modelling conflicts between security compliance and human behaviour.

• 1: Introduction to Information Security2: Risk Management3: The Complexity of Risk Management4: Stakeholders and Communication5: Information Security Governance6: Problems with Policies7: How Security Managers Make Decisions8: How Users Make Decisions 9: Security and Usability10: Security Culture11: The Psychology of Compliance12: Conclusion - Changing the Approach to Security Appendix: AnalogiesAnalogy 1: Cake and SecurityAnalogy 2: Poker and Security

Leron Zinatullin (zinatullin.com) is an experienced risk consultant specialising in cyber security strategy, management and delivery. He has led large-scale, global, high-value security transformation projects with a view to improving cost performance and supporting business strategy.He has extensive knowledge and practical experience in solving information security, privacy and architectural issues across multiple industry sectors.He has an MSc in information security from University College London, where he focused on the human aspects of information security. His research was related to modelling conflicts between security compliance and human behaviour.

• 1: Introduction to Information Security2: Risk Management3: The Complexity of Risk Management4: Stakeholders and Communication5: Information Security Governance6: Problems with Policies7: How Security Managers Make Decisions8: How Users Make Decisions 9: Security and Usability10: Security Culture11: The Psychology of Compliance12: Conclusion - Changing the Approach to Security Appendix: AnalogiesAnalogy 1: Cake and SecurityAnalogy 2: Poker and Security