How do you make cybersecurity understandable to people who do not work in it?
I work in cybersecurity at a US health system, where the work involves cybersecurity engineers, network teams and caregivers.
In early 2025, I made comic strips on cybersecurity topics, so that busy caregivers could understand a topic by glancing at a strip for a minute or two. I have also scripted and produced videos for an internal cybersecurity platform. The work page says what that involved.
What follows are my views; I have not put them into practice in my organization. Most enterprises treat cyber awareness as a drill; they keep pushing training and phishing drills. Phishing drills are okay, but pushing training only overburdens people. What I believe in is a careful, thoughtfully designed skills survey, and requesting training completion based on role, skill level and necessity.
For traditionally run awareness programs, this is much harder to do. The people with those responsibilities will keep doing what they have been doing: declaring October cyber awareness month, conducting some fun events, and pushing some emails, sessions and trainings. I am surprised that people do not put more thought into the structural thinking I am trying to champion.
I write about making cybersecurity understandable to people who do not work in it.
§ 01
Essays
The first essay on this topic is being written. Subscribe to the RSS feed to read it when it is published. Until then, the sections below list what is filed under this topic.
In early 2025, I made comic strips on cybersecurity topics for busy caregivers, with Microsoft 365 Copilot’s image generation for the panels and Figma for the dialogue.
Video · US health system · 2025
Product videos for an internal cybersecurity platform
I scripted and produced product videos for an internal cybersecurity platform, from storyboard to motion graphics in Premiere Pro and After Effects.
Ghostwriting · LoginRadius
Ghostwritten eBooks on data privacy and passwordless login
I turned in-house expertise on data privacy and passwordless authentication into long-form eBooks for customer education. They were published under an executive’s name, so they are not linked here.
How do you help colleagues explore where AI becomes the best tool for their work?
Which AI tool fits a piece of work depends on how its harness, environment and context work; when a task works in GitHub Copilot CLI, I turn it into a skill colleagues can run.
What happens between your prompt and the answer, and how do you keep an agent accountable?
In my own work, I focus on harness engineering and context engineering, and proving what an agent did takes evidence, end-to-end traces and audit logs.
How do you market technical products, such as AI, cybersecurity and developer tools?
When marketing cybersecurity products, we need to understand the pain points very clearly, and the solution we propose should clearly show its technical value.