Article from Carl Hagarty/CE Hagarty & Associates

Interviewing tips for hiring managers

 Hello ASIS member,    

     Have you ever observed an employee advancing within an organization, only to fail for reasons that should have been clearly apparent before the fact?  Or, even more likely, have you watched as someone who had not succeeded in previous assignments moved into a new position only to fail once again?

     Hiring and promoting the right people is critical in business. Better hires mean increased productivity, lower turnover, higher morale and a better overall customer experience.  

     Even so, many hiring managers have trouble identifying the right candidate. So, how do you recognize the real and capable candidates? How do you find that person who can hit the ground running?

     First, traditional “gut feel” interviewing is often a poor predictor of good hires. If you ask a manager, “Are you a good interviewer?”, most will say “Yes.” But when you ask about their interviewing approach, most will tell you that they rely on their gut feeling.

     Instead, a structured Behavioral Interview can dramatically increase your success in hiring the best people. This method is based on the premise that the best way to predict future behavior is to determine and evaluate past behavior. 

     In a behavioral interview, the candidate demonstrates their knowledge, skills and abilities by providing specific examples of past experiences. Thus, rather than being asked to tell the interviewer what they would do in a situation, in a behavioral interview the candidate must describe, in detail, how they actually handled such a situation in the past. For example, an interviewer might ask a candidate to name a time that they accomplished a task on the job without being asked. Then, the interviewer may probe more deeply with open follow-up questions such as: “How did you deal with it?” or “What was the outcome?”

     Remember, the key to success for every hiring is in first determining the competencies that the organization specifically needs and then using the behavioral method of interviewing to determine whether the candidate possesses the matching skills and experience. 

     Best wishes for a great 2012 and beyond! 

Regards, Carl 

 

 

Ten commandments for effective security training

Skip the boring lectures and understand how people really learn new information and habits

 

 

By Joe Ferrara, Wombat Security Technologies

 

 

 

 

 

May 03, 2012— CSO—

Information security people think that simply making users aware of security issues will make them change their behavior. But security pros are learning the hard way that awareness rarely equals change.

One fundamental problem is that most awareness programs are created and run by security professionals, people who were not hired or trained to be educators. These training sessions often consist of long lectures and boring slides—with no thought or research put into what material should be taught and how to teach it. As a result, organizations are not getting their desired results and there's no overall progress.

To solve this puzzle, it's important to step back and understand how people most effectively learn subject matter of any type.

 

[Also read 7 practical ideas for security awareness | How to change people's minds]

 

The science of learning dates back to the early 1950s, and its techniques have been proven over time and adopted as accepted learning principles. Applied to information security training, these techniques can provide immediate, tangible, long-term results in educating employees and improving your company's overall security posture.

 

1. Serve small bites

People learn better when they can focus on small pieces of information that the mind can digest easily. It's unreasonable to cover 55 different topics in 15 minutes of security training and expect someone to remember it all and then change their behavior.

Short bursts of training are always more effective.

 

2. Reinforce lessons

People learn by repeating elements over time—without frequent feedback and opportunities for practice, even well-learned abilities go away. Security training should be an ongoing event, not a one-off seminar.

 

3. Train in context

People tend to remember context more than content. In security training, it's important to present lessons in the same context as the one in which the person is most likely to be attacked.

 

4. Vary the message

Concepts are best learned when they are encountered in many contexts and expressed in different ways. Security training that presents a concept to a user multiple times and in different phrasing makes the trainee more likely to relate it to past experiences and forge new connections.

 

Ten commandments for effective security training

Skip the boring lectures and understand how people really learn new information and habits.  

 

By Joe Ferrara, Wombat Security Technologies

Page 2

 

 

5. Involve your students

It's obvious that when we are actively involved in the learning process, we remember things better. If a trainee can practice identifying phishing schemes and creating good passwords, improvement can be dramatic.

Sadly, hands-on learning still takes a backseat to old-school instructional models, including the dreaded lecture.

 

6. Give immediate feedback

If you've ever played sports, it's easy to understand this one. "Calling it at the point of the foul" creates teachable moments and greatly increases their impact. If a user falls for a company-generated attack and gets training on the spot, it's highly unlikely they'll fall for that trick again.

 

7. Tell a story

When people are introduced to characters and narrative development, they often form subtle emotional ties to the material that helps keep them engaged. Rather than listing facts and data, use storytelling techniques. (Editor's note: see, for example, How to rob a bank.)

 

8. Make them think

People need an opportunity to evaluate and process their performance before they can improve. Security awareness training should challenge people to examine the information presented, question its validity, and draw their own conclusions.

 

9. Let them set the pace

It may sound cliché, but everyone really does learn at their own pace. A one-size-fits-all security training program is doomed to fail because it does not allow users to progress at the best speed for them.

 

10. Offer conceptual and procedural knowledge

Conceptual knowledge provides the big picture and lets a person apply techniques to solve a problem. Procedural knowledge focuses on the specific actions required to solve the problem.

Combining the two types of knowledge greatly enhances users' understanding. For example, a user may need a procedural lesson to understand that an IP address included in a URL is an indication that they are seeing a phishing URL. However, they also need the conceptual understanding of all the parts of a URL to understand the difference between an IP address and a domain name, otherwise they may mistake something like www4.google.com for a phishing URL.

 

Joe Ferrara is president and CEO of Wombat Security Technologies.

 

Read more about security awareness in CSOonline's Security Awareness section.

 

 

New Job Postings from the NYC Chapter

NEW JOB POSTINGS from around the metro area and around the US. Check them all, they are not in geographical order:

  

 

Professional Sports League – Director of Investigative Servi…
Professional Sports League – New York, NY
with 68 security representatives throughout the country
Track activities of players and others at high risk to

ensure they have appropriate security available…
JobsInSports.com – 4 days ago

Director of Security
Conrad New York – New York, NY (Tribeca area)
Directs, oversees and ensures the safety of guests and

team members and the security of the property.
Trains team members and ensures full compliance with…
Hilton – 2 days ago


Director of Safety
Homes for the Homeless – Manhattan, NY
Homes for the Homeless (HFH) is the largest single

provider of transitional housing in New York City.
At our five American Family Inns, families receive the…
idealist.org – 3 days ago


Director, Student Safety Program Support and Development

NYC Department of Education – Brooklyn, NY
Weighted Incident Exemption Process (WIEP). Knowledge of
all DOE policies and procedures regarding student safety,
including the Chancellor's Regulations,… $81,000 a year

NYC Department of Education – 10 days ago


SAP Security Lead
NBC Universal 33 reviews – New York, NY (Midtown area)
* Perform regular system audits to detect deviations of established
procedures, role mapping, unauthorized system activity, and report

findings….
NBC Universal – 1 day ago

Security Analyst
Columbia University 11 reviews – New York, NY
Requires a bachelor's degree or equivalent in education
and experience, plus four years of related experience. Yes….

Columbia University – 2 days ago


Campus Public Safety Sergeant (Provisional)
CUNY – New York, NY
- Lift a 40-pound box (which might contain evidence, papers,
receipts, etc.) without assistance. – Read and understand

information and ideas presented in…
CUNY – 2 days ago

Treasury & Securities Services – VP Compliance Audit Manager…
JPMorgan Chase – New York, NY
TSS is split into two main component businesses – Worldwide

Securities Services (WSS) and Treasury Services (TS).
WSS provides custody and securities products…
JPMorgan Chase – 3 days ago


Fire Safety Director – New York Times Building
Forest City Enterprises – New York, NY

Follows all post orders as assigned.
Monitoring and responding to the Building Intercom System.
Monitoring computerized Access Control, CCTV Systems and…
Forest City Enterprises – 3 days ago

Director of Security and Facility Security Officer

Advanced Acoustic Concepts – Hauppauge, NY
Advanced Acoustic Concepts LLC a joint venture between DRS Defense
Solutions and Thales USA is a technical leader in the fields of sonar
systems sonar signal…
Dice – 6 days ago


Director of Safety
Children's Medical Center 14 reviews – Dallas, TX
and management of ongoing performance improvement for Safety Management,
Security Management, Hazardous Materials/Waste Management,

Emergency Management, Fire…
Children's Medical Center – 6 days ago


Police Officer – new
Abilene Christian University – Abilene, TX
Have no felony convictions of any kind, or any misdemeanor
convictions of crimes involving moral turpitude….

Abilene Christian University – 3 hours ago


Senior Director Global Sourcing Asset Protection & Security
Walmart – Bentonville, AR
the physical security, information security, crisis… security,
or related field. Job Role SeniorDirector Global Sourcing

Asset Protection & Security…
Walmart Stores – 3 days ago


Asc. Director Continuous Improvement – new
Purdue Pharma L.P. – Stamford, CT (Downtown area)
Purdue Pharma L.P. and its associated U.S. companies

are known for pioneering research on the principal cause
of human suffering: chronic pain. Headquartered in…
Purdue Pharma L.P. – 1 hour ago


I Integrated Logistics Business Development Manager – new

The Boeing Company 108 reviews – United States
1.Establish a broad network of customer relationships and
knowledge of the customer's responsibilities and requirements.
Develop and maintain customer contact…

Defense Talent Network – 6 hours ago


Director of Technology Operations – new
Citizen Schools 2 reviews – Boston, MA
The ideal candidate must demonstrate the ability to
quickly and accurately troubleshoot, identify, and resolve

problems in a fast-paced team environment….
Citizen Schools – 33 minutes ago



Supervisory Intelligence Specialist – new
Department of the Navy – Arlington, VA
Please follow all instructions carefully.

Errors or omissions may affect your rating and/or
appointment eligibility…. $123,758 – $155,500 a year
usajobs.gov – 2 hours ago


Director of Public Safety

Franklin & Marshall College – Lancaster, PA
building and maintaining strong relationships
with community and campus constituencies and local
law enforcement,….
Franklin & Marshall College – 4 days ago



Security Supervisor
Saint Joseph's University – Philadelphia, PA
Disseminates information at roll call regarding scheduled events
on campus and situations that occurred prior to the on-coming s
hift that may affect the overall… $37,000 – $40,000 a year

Saint Joseph's University – 2 days ago

Sr. Director Safety & Security
Torresdale Campus – Philadelphia, PA
The Senior Director plans, directs and coordinates activities
relating to the protection, safety andsecurity necessary

to protect the organizations property,…
Aria Health – 2 days ago



Security Officer (UPMC East)
UPMC – Pittsburgh, PA
-Acts in a manner that supports the UPMC East four core values of
quality & safety, care & compassion, dignity & respect, and

community…. $10.31 – $13.31 an hour
UPMC – 2 days ago


Security & Emergency Preparedness Manager
Kennedy Health System – New Jersey – +1 location
Assists the Director of Safety & Security in oversight of the

Security and Emergency Management Programs. Works with
Director to ensure to ensure a safe and…
Kennedy Health System – 3 days ago


DIRECTOR, SECURITY POLICY & AWARENESS
Ralph Lauren Media LLC 20 reviews – Lyndhurst, NJ

o Work with technical and other business teams to assure
alignment on policy. o Manage process for development
of policy-supporting technical standards for…
Ralph Lauren Media LLC – 4 days ago


Security Director

Digital Prospectors – New Jersey
Our ES team is looking for a results-oriented individual with
effective technical and communication skills who can ensure
the security of all Department of… $150,000 a year

Easily apply to this job
Digital Prospectors – 9 days ago


Global Director of Safety and Health
Tyco International – Princeton, NJ
A minimum of 15 years experience with at least 5 in a
management role and corporate experience preferred;

a B.Sc. degree in safety management, engineering, or…
Tyco International – 5 days ago


Director of Safety & Security – new
Loews Coronado Bay Resort – Coronado, CA
Minimum five years experience as a hotel Director of

Security or five years law enforcement management experience….
Loews Hotels – 12 hours ago


Officer – Security – K-9
Wynn Las Vegas 7 reviews – Las Vegas, NV
*Candidates must have proficiency with personal

computers. *Knowledge of local laws, investigative
methods, and fire safety procedures is preferred….
Wynn Las Vegas – 1 day ago


Security Manager – Mandarin Oriental, Las Vegas
Mandarin Oriental – Las Vegas, NV

Presence during all critical peak times and special
events will be essential. Partner with Human
Resources to set up evaluation and recognition programs for…
Mandarin Oriental – 10 days ago


Director of Information Technology & Services

Eastern Idaho Regional Medical Center – Idaho – +1 location
Builds positive relationships with Facility leadership team,
Facility department directors & managers, and other Division
leaders as dictated by the business…

Capital Regional Medical Center – 3 days ago

Director Corporate Fraud, Security & Safety
HSN 13 reviews – Saint Petersburg, FL
Develop and maintain the operational policies, processes
and execution for the fraud operations team which determines

the validity of queued transactions…
HSN – 4 days ago


Director of Security
W South Beach – Miami Beach, FL
Hotel Safety and Security come first; this department is
responsible for the safeguarding of hotel property,

assets, guests, visitors, and employees. They…
Hcareers.com – 3 days ago


Director of Facilities
Give Kids The World – Orlando, FL
-Manage Village safety and security program to ensure highest level of

care for all Village stakeholders and assets….
OrlandoJobs.com – 3 days ago


Director, Corporate Information Security
Nasco – Atlanta, GA
Change management : Must have the proven ability to drive

change in a mid-size organization with mature processes
and a diversified supply chain….
Nasco – 6 days ago

Director Incident Response Services
Dell Financial Services L.P. – Atlanta, GA
Dell is an Equal Opportunity Employer. To learn more about

our commitment to Diversity & Inclusion, visit:….
Dell Financial Services L.P. – 3 days ago



Director Facilities Management/Security
Fawcett Memorial Hospital – Port Charlotte, FL
for a seasoned healthcare Facilities Management

f the… of Care programs. The director will represent the…
HCA West Florida – 45 minutes