reflections on digital security training
Folks are often surprised my background isn't in tech but in developmental psychology. Digital security training is very much a hobby-turned-job (whoops).
In the last 10 or so years, trainers have largely adopted "growth mindset"—albeit an imperfect idea from psych—and ditched the militaristic framing of "be perfect or else". Thank god.
But I have a nagging concern it's not the end-goal. "I'm just glad you're here" workshops rob people of actual growth.