Why AI Awareness is Not Enough and How to Change It

We have a problem

There is a problem at the moment and it relates to AI as much as it STILL does cyber security. The problem is that just becuase people are aware of the benefits of using AI or being cyber safe, they are sill not walking the talk.

Wierd right?

As an author of a culture change book on the topic of driving Security Culture in organisations, it's not so surprising.

The People Factor in AI and Cyber Security

AI and cyber security are often seen as technical domains, where sophisticated tools and systems are used to enhance data and network capabilities and protect them from malicious attacks.

However, AI and cyber security are also human domains, where people are the ones who create, use, and manage these technologies. People are also the ones who can make mistakes, resist change, or act carelessly with sensitive information.

Therefore, AI and cyber security awareness, or the knowledge and understanding of AI and cyber threats and best practices, is not enough to ensure a productive and secure digital environment.

We need to pay more attention to the people factor in AI and cyber security, and how we can influence their behaviour and habits to adopt AI and reduce risks and vulnerabilities.

Why Knowledge Does Not Change Behaviour

One of the common assumptions in AI and cyber security education and training is that if we provide people with enough information and facts, they will change their behaviour accordingly.

However, this is not always the case.

Research has shown that knowledge does not necessarily lead to behaviour change, and that there are many other factors that affect how people act with AI and online. Some of these factors include:

• Emotions: People may act impulsively, irrationally, or emotionally when they are stressed, angry, bored, tired or curious, and ignore the potential consequences of their actions.
• Attitudes: People may have different beliefs, values, and opinions about AI and cyber security, and may not see them as a priority, a responsibility, or a benefit.
• Norms: People may follow the social norms and expectations of their peers, colleagues, or family, and may not want to stand out, question, or challenge the status quo.
• Incentives: People may respond to rewards and punishments, and may seek immediate gratification, convenience, or recognition, rather than long-term productivity or security.
• Habits: People may have ingrained patterns of behaviour that are hard to break, and may rely on heuristics, shortcuts, or routines, rather than critical thinking or rational decision making. A lot to do with AI and Cyber Security is about changing your behaviour and your flow of work.

How to Change Behaviour for AI and Cyber Security

If we want to improve AI and cyber security behaviour, we need to go beyond awareness and use more effective strategies that are based on behaviour science, emotion and psychology, and human factors.

Some of these strategies that I am exploring are:

• Show, don't tell: Instead of telling people what to do or not to do, show them the consequences of their actions, the benefits of their compliance, or the risks of their non-compliance. Use simulations, scenarios, or stories to make the impact of AI and cyber security more tangible, relevant, and personal.
• Involve, don't instruct: Instead of instructing people what to do or not to do, involve them in the process of AI and cyber security. Use participatory methods, such as co-design, feedback, or gamification, to make AI and cyber security more engaging, interactive, and fun.
• Nudge, don't force: Instead of forcing people to do or not to do something, nudge them in the right direction. Use subtle cues, prompts, or reminders to make AI and cyber security more salient, convenient, or attractive.
• Support, don't blame: Instead of blaming people for their mistakes or failures, support them to learn and improve. Use positive reinforcement, encouragement, or coaching to make AI and cyber security more rewarding, motivating, or empowering.

An individual changing their behaviour is one thing, but how do we acheive organisation-wide change and adoption?

The above strategies may not be enough to achieve organisational-wide change, as they may not address the underlying culture and values that shape people's behaviour.

Culture is the shared set of beliefs, norms, and assumptions that guide how people think, feel, and act in a group or organisation. Changing culture requires a systematic and holistic approach that involves different mechanisms, such as leadership, communication, policies, processes, and measurement.

A useful model for security culture change can be found in my book "Security Culture: A How-to Guide for Improving Security Culture and Dealing with People Risk in Your Organisation". This model outlines the different mechanisms in an organisation to change culture, and how they can be aligned and integrated to create a positive and sustainable security culture.

The same model can be adapted to AI culture change, as both domains require people to adopt new technologies, behaviours, and mindsets that may challenge their existing culture.

Keep a watch out for my new book on driving AI Adoption

You heard it here first!!!! I have decided to rewrite my Security Culture book with an AI Adoption or "AI Culture" lens. And I will be discussed the above model of culture change as it applies to driving a culture of AI readiness and adoption.

Writting is underway, and I hope to have it finished by May 2024.

Conclusion

AI and cyber security awareness is not working because we are not paying enough attention to the people factor in AI and cyber security.

Knowledge does not necessarily change behaviour, and we need to consider the emotional, psychological, and social aspects of human behaviour.

By using strategies that are based on behaviour science, emotion and psychology, and human factors, we can influence people to adopt AI and act more securely and responsibly online.

However, to achieve organisational-wide change, we also need to address the culture and values that shape people's behaviour, and use a systematic and holistic approach that involves different mechanisms, such as leadership, communication, policies, processes, and measurement.

By doing so, we can create a positive and sustainable AI and security culture that supports our digital transformation and innovation.

Just wanted to share a game-changer I've found for managing social media: Buffer.com !

If you're juggling multiple social media platforms and feeling overwhelmed (like I was ??), Buffer is a lifesaver. It's FREE and super user-friendly. Here's why I'm loving it:

1?? One Dashboard for All: Post to Facebook, Twitter, LinkedIn, and more from one place!

2?? Schedule Posts: Plan your content calendar in advance. Buffer does the posting for you - no more alarm reminders to post! ?

3?? Analytics: Understand what works with easy-to-read analytics. Make smarter decisions for your content.

4?? Team Collaboration: Work with your team seamlessly, without stepping on each other's toes.

Note, if you want to connect more than three social media platforms that’s when some charges kick in. However they’re much less compared to other platforms like HootSuite. I'm all about efficiency and Buffer has streamlined my social media like never before. Totally recommend giving it a try!

?? Check it out: [Buffer.com ](https://buffer.com )

P.S. Not sponsored, just genuinely impressed! ????

At the end of your prompt, say "Please ask me questions if you are not sure what I need from you".

This encourages the AI to check in with you on what outcome you are after, and can help the AI to provide a better resonse.

For those of you new to my LinkedIn content - follow me on TikTok , subscribe to my YouTube channel , follow me on Instagram , and hit me up on Twitter or Threads dor Tech News or Person Brand Tips.

Join the free text news service: Digital Culture Ideas & News Hub - this is my absolute favourite activity. Love it more than posting on general social media. You can also chat to me here. https://chat.whatsapp.com/DigitalCultureIdeasNewsService

Hilary's Digital Culture Ideas Show: - YouTube channel: https://www.youtube.com/@HilsWalton

Podcast on Spotify (and available anywhere else you listen to your podcasts) : https://open.spotify.com/show/3z4t5ZeAB4aSwr0ZeqtyaZ?si=b4a0a9a8894b43f5

Instagram: https://www.instagram.com/hilswalton/

LinkedIn: https://www.dhirubhai.net/in/hilswalton/

X (Twitter): https://twitter.com/HilsWalton

TikTok: https://www.tiktok.com/@hilswalton

Facebook: https://www.facebook.com/DigitalCultureIdeas

Threads: https://www.threads.net/@hilswalton

?