Search a title or topic

Over 20 million podcasts, powered by 

Player FM logo
Artwork

Content provided by Risky Creative. All podcast content including episodes, graphics, and podcast descriptions are uploaded and provided directly by Risky Creative or their podcast platform partner. If you believe someone is using your copyrighted work without your permission, you can follow the process outlined here https://player.fm/legal.
Player FM - Podcast App
Go offline with the Player FM app!

Vanity Metrics - Cary Johnson on Why Benchmarks Fail and Baselines Matter

1:09:40
 
Share
 

Manage episode 525190748 series 3672475
Content provided by Risky Creative. All podcast content including episodes, graphics, and podcast descriptions are uploaded and provided directly by Risky Creative or their podcast platform partner. If you believe someone is using your copyrighted work without your permission, you can follow the process outlined here https://podcastplayer.com/legal.

Subscribe on your favourite platforms and visit https://linktr.ee/riskycreative for more of ∠The Awareness Angle.

This week on The Awareness Angle Interviews, Ant sits down with Cary Johnson, founder of Phishbusters, for a straight talking conversation about security awareness, human risk, and why so many programmes struggle to prove real impact.

This episode strips away dashboards, buzzwords, and vendor narratives to focus on what actually reduces phishing risk. Cary brings a science led perspective to awareness, challenging engagement metrics, benchmarks, and the idea that looking busy means you are becoming more secure.

We get into phishing as a measurement tool rather than a content engine, why repeat clickers are not all the same, and how poor measurement can quietly create fatigue, resentment, and false confidence across organisations.

If you work in security awareness, human risk, or phishing defence, this conversation will challenge how you think about success.

We talk about

  • Why engagement does not equal impact
  • Benchmarks versus baselines, and why the difference really matters
  • Phishing as the number one human risk
  • Repeat clickers, learners, and where risk actually sits
  • Why overtraining creates fatigue and resentment
  • Verification skills and keeping awareness simple
  • Compliance theatre and the danger of vanity metrics
  • Vendors marking their own homework
  • How to test whether your programme is genuinely working

This is a calm but challenging discussion that says the quiet part out loud. It shows how easily good intentions can turn into noise when measurement is flawed, and how much simpler awareness can be when we focus on proof instead of performance.

Let me know what it gets you thinking about.

Stay aware, stay secure.

Previous Episode
https://www.youtube.com/watch?v=EntRmhcDOBM&list=PLEsOj51Q0PfA0qX6BRlNnyD7lG8JlijRf

Links
YouTube: https://www.youtube.com/@riskycreative
LinkedIn: https://www.linkedin.com/company/riskycreative
Spotify: https://open.spotify.com/user/riskycreative
Website: https://www.riskycreative.com
Contact: [email protected]

Intro and outro music
16! by falling forever
https://fallingforever.bandcamp.com/track/16
License: CC BY 4.0
https://creativecommons.org/licenses/by/4.0

  continue reading

67 episodes

Artwork
iconShare
 
Manage episode 525190748 series 3672475
Content provided by Risky Creative. All podcast content including episodes, graphics, and podcast descriptions are uploaded and provided directly by Risky Creative or their podcast platform partner. If you believe someone is using your copyrighted work without your permission, you can follow the process outlined here https://podcastplayer.com/legal.

Subscribe on your favourite platforms and visit https://linktr.ee/riskycreative for more of ∠The Awareness Angle.

This week on The Awareness Angle Interviews, Ant sits down with Cary Johnson, founder of Phishbusters, for a straight talking conversation about security awareness, human risk, and why so many programmes struggle to prove real impact.

This episode strips away dashboards, buzzwords, and vendor narratives to focus on what actually reduces phishing risk. Cary brings a science led perspective to awareness, challenging engagement metrics, benchmarks, and the idea that looking busy means you are becoming more secure.

We get into phishing as a measurement tool rather than a content engine, why repeat clickers are not all the same, and how poor measurement can quietly create fatigue, resentment, and false confidence across organisations.

If you work in security awareness, human risk, or phishing defence, this conversation will challenge how you think about success.

We talk about

  • Why engagement does not equal impact
  • Benchmarks versus baselines, and why the difference really matters
  • Phishing as the number one human risk
  • Repeat clickers, learners, and where risk actually sits
  • Why overtraining creates fatigue and resentment
  • Verification skills and keeping awareness simple
  • Compliance theatre and the danger of vanity metrics
  • Vendors marking their own homework
  • How to test whether your programme is genuinely working

This is a calm but challenging discussion that says the quiet part out loud. It shows how easily good intentions can turn into noise when measurement is flawed, and how much simpler awareness can be when we focus on proof instead of performance.

Let me know what it gets you thinking about.

Stay aware, stay secure.

Previous Episode
https://www.youtube.com/watch?v=EntRmhcDOBM&list=PLEsOj51Q0PfA0qX6BRlNnyD7lG8JlijRf

Links
YouTube: https://www.youtube.com/@riskycreative
LinkedIn: https://www.linkedin.com/company/riskycreative
Spotify: https://open.spotify.com/user/riskycreative
Website: https://www.riskycreative.com
Contact: [email protected]

Intro and outro music
16! by falling forever
https://fallingforever.bandcamp.com/track/16
License: CC BY 4.0
https://creativecommons.org/licenses/by/4.0

  continue reading

67 episodes

All episodes

×
 
Loading …

Welcome to Player FM!

Player FM is scanning the web for high-quality podcasts for you to enjoy right now. It's the best podcast app and works on Android, iPhone, and the web. Signup to sync subscriptions across devices.

 

Copyright 2025 | Privacy Policy | Terms of Service | | Copyright
Listen to this show while you explore
Play