The Biggest Lie in Cybersecurity: Why Your Training Is Failing | Mike Ouwerkerk

We've been told that people are the "weakest link" in cybersecurity.
But what if the real weakness is the training itself? In this episode, I sit down with cyber awareness expert Mike Ouwerkerk, a trainer who breaks all the rules—from walking into client sites unescorted to prove a point, to running gamified workshops where staff learn to spot real-world scams.

Mike argues that conventional, video-based training is a "boring and effective waste of money" because it fails to build the one skill that truly matters: suspicion. He reveals why motivation is the key to security, how to make training personal by focusing on home and family safety, and shares shocking true stories of social engineering that prove just how easily our trust can be manipulated.

This conversation is a must-watch for any leader, business owner, or employee who wants to understand the psychology of cybercrime and build a culture that is truly resilient to attack.

Key Topics:
(00:00) The Failure of Modern Cyber Awareness Training
(07:30) The Motivation Secret: Why People Don't Care About Your Business (11:43) The Art of Suspicion: A Skill You Can't Teach Quickly
(16:05) Stop Blaming People: Why the "Weakest Link" is a Myth
(25:29) The 13-Laptop Heist: A True Story of Social Engineering
(29:18) People, Process, Technology: What Really Matters?

#cybersecurity #socialengineering #leadership #corporatetraining #mikeouwerkerk