Humor, The Secret Weapon for Cybersecurity Awareness
Rosanne’s core message is that humor can be a powerful way to make cybersecurity awareness memorable and engaging, but it only works when it is tied to a specific behavior change. She opens with the famous Old Spice “look at me” style monologue to show how a humorous campaign can revive attention around an unfashionable brand and remain recognizable years later. She then connects that lesson to cybersecurity by showing a parking sign warning people to lock their cars, take their keys, hide belongings, and jokingly use “a decoy purse with poisonous bees.” The point is not simply that the sign is funny, but that the humor makes the warning noticeable enough for people to discuss and remember it.
She next describes her own work as a product manager developing cybersecurity awareness materials, including a security and privacy tear-off calendar with 366 tips, news, XKCD images, and concise advice. The calendar’s success, including people displaying it where they would see it daily, leads into her broader framework for awareness work: start with a risk-based approach, decide what behavior should change, convince leadership, secure budget, run the campaign, and measure outcomes. Humor belongs in the campaign and communication layer, but it must be matched to the target audience and target behavior. Rosanne stresses that attention alone is insufficient if the campaign does not help people actually act differently.
The talk then moves into behavior change theory and campaign success factors. Using the COM-B model, she explains that people need capability, motivation, and opportunity to perform the desired security behavior. A funny message may increase motivation or attention, but it cannot compensate for unclear processes, missing reporting channels, or lack of ability. She highlights research-backed success factors: know the audience, design for cultural context and employee cultural diversity, and motivate employees to actively engage rather than passively notice a poster.
Rosanne illustrates humor’s reach with password jokes and a comedian’s widely viewed routine explaining why “Password1!”-style choices are predictable. She argues that humor works because it creates a “state of play,” an open mindset where people are more willing to interact and try something new, using the Monty Python silly-walk crosswalk as an example. She also links humor to the age of AI: as AI-generated content becomes common, human effort, originality, and joke comprehension can signal authenticity. The provided transcript ends as she introduces Robert Cialdini’s persuasion principle of reciprocity and explains why people respond differently when they sense real effort behind an awareness campaign.
Human Impact
