logoalt Hacker News

xvxvx • yesterday at 9:40 PM • 3 replies • view on HN

‘a lay-language resource‘.

IMO this misses the mark. Yes, it’s a decent attempt at simplifying cybersecurity, but if this is aimed at entry-level, non-technical people, it’s not gonna work.

One of my earliest jobs was to redesign training materials for one of the worlds largest companies. I stripped the training to its core, the true basics, and started there. The results were remarkable. I feel the urge to do the same with this document…


Replies

mcmcmc • yesterday at 10:46 PM

Have to agree with you. You can’t introduce concepts like phishing and MFA without actually explaining what they are.

➕ show 1 reply
jaggederest • yesterday at 9:44 PM

I'd be interested in a small sample of what you're talking about. I suspect that's a marketable product these days even if all you do is deslopify generated documentation.

➕ show 1 reply
zoeysmithe • today at 12:25 AM

Have you read CSWP50? Its not exactly written on the 3rd grade level. I think its a pretty good compromise between something only your IT department can understand and what a small employer needs to know. If anything, it leans too technical and verbose.

Not only are there links to go deeper into each subject matter but also a part telling the employer how to hire help if they need cybersecurity help and with a link to the "Small Business Cybersecurity Support Programs Finder" directory. Ideally they should be asking around in the small business community for a local vendor, but this document does a lot of things right.

I think this is an excellent document for small business and doesn't really talk down to them.

➕ show 1 reply