Park your car in a bad suburb, leave your laptop on the passenger seat, leave your keys in the ignition. What happens next?

The above is akin to what I often see in tech-enabled early-stage companies with respect to their security and privacy practices: Dangerous sh*t that’s going to result in loss and sadness if some changes to skills and awareness aren’t made.

Here’s a real-world example of what I consider to be some of the best “everyday security culture” being put into practice by a non-tech leader at one of my clients:

Scam Email Defused

I love this example in particular because it:

✅ Identifies a credible threat via an example from their inbox
✅ Develops basic staff skills and awareness
✅ Reinforces that security is important to leadership
✅ Team bonding over tasty food for 15m one following morning

Sure, there’s great free short training courses out there (like Wizer that I recommend, but it can’t compete with the learning reinforcement that comes from free coffee or donuts now does it? ☕🍩