Scott Wright

Relationships built over time become trusted sources of advice, collaboration, and career growth, and consistent small contacts every few months keep them alive.

• The practical instruction is to begin long before you need the network.
• The strongest version of the argument is credited to Michael Hughes, described as their networking mentor and friend of over ten years.
• Hughes taught that networking is about the quality of relationships, not the quantity, and about staying authentic.

A post promoting a 26 November live panel of security professionals sets out the long-term networking argument and explains the Cyber Security Awareness Forum. Another post honours Michael Hughes and says his principles will be highlighted during that day's forum session on networking online and offline as a career skill.

Read original · Original 2

They also call fake termination notices a line-crossing tactic.

One issue bundles the Salesforce data breach and its customer impact, the case that employees discussing phishing tests is positive, a CSAF networking session, and the bonus-lure argument. Another issue flags RottenPhish, described as fake termination notices that cross a serious line.

Read original · Original 2

The session covers common misconceptions about emergency access and names Apple Legacy Contacts, Google Inactive Account Manager, and Facebook legacy settings. The subject is the mismatch between expectation and platform permission.

A post asks who would need access if you became incapacitated tomorrow, then lists the misconceptions and settings for a 12:00 PM ET Digital Legacy Network discussion, with a registration link included.

Read original

Fake termination notices are treated as an attack lure. The treatment stays practical and tied to what awareness teams should do.

An issue of Human Cyber Security Insights lists spoofed AI sidebars that lead to real security risks, where AI belongs in a security programme, a panel recording, and RottenPhish fake termination notices.

Read original

The Cyber Security Awareness Forum is described as a collaborative community for security awareness managers, risk managers, CISOs, and others working on human risk and security culture.

• Its live panel sessions are promoted with a date, a registration link, and an open invitation.
• The post states that the forum is sponsored by Click Armor, an interactive security training platform.

The networking post promotes a 26 November 1pm ET panel, explains what the forum is, and links a registration page, naming Click Armor as sponsor.

Read original · Original 2

The post opens with a blunt question: if you became incapacitated tomorrow, who would need access to your online accounts?

• It names a common assumption — that a spouse, child, or executor can simply step in — and explains that platforms don’t work that way.
• The session listed for 12:00 PM ET covers misconceptions about emergency access, Apple Legacy Contacts, Google Inactive Account Manager, and Facebook legacy settings.
• A registration link is included.
• The through-line is the gap between who people expect to help and who is actually permitted to access their accounts.

For brands planning a campaign

Digital legacy is a consumer-facing slice of human risk that most security-awareness programmes never touch, making it an unusual angle for a webinar or awareness-post series. The post also shows the format Scott Wright already runs: a scheduled live discussion with registration that a partner could join rather than invent.

This issue of Human Cyber Security Insights lists four items: the Salesforce data breach and its impact on customers; an argument that employees talking about your phishing tests is a good thing; CSAF session 64 on business networking for cyber professionals; and a claim that end-of-year bonuses, or their absence, make a poor phishing-test subject.

• A sign-up link for the next live CSAF session is included.
• Two of the four items offer opinions on awareness-programme design rather than news summaries.

For brands planning a campaign

The arguments about phishing tests and bonus lures offer ready-made talking points for a thought-leadership webinar on human risk: they take a defensible position a training vendor can build a session around. The digest format also suggests a recurring content slot rather than a one-off campaign.

Another issue of the newsletter covers four topics: spoofed AI sidebars that create real security risks; where AI belongs in a security programme; a recording of the business networking session for cyber professionals; and RottenPhish, described as fake termination notices that cross a serious line.

• The post links the recording, making the session available to watch rather than just announcing it.
• The AI item focuses on where the technology belongs in a programme, not on a product pitch.

For brands planning a campaign

A vendor selling AI-adjacent security training could use the “where AI belongs” framing as a neutral panel topic.

• The nine-thousand-odd follower audience is awareness-minded and professional.
• The recording link offers existing session material to point to when proposing a joint webinar.

This post honours Michael Hughes, described as Scott Wright's networking mentor and a friend of over ten years, who died on 21 September 2025.

• It credits him with the lesson that professional networking is about the quality of relationships, not their quantity, and about staying authentic.
• The background image comes from a video Michael Hughes sent after skydiving on his seventieth birthday.
• The post also promotes a live Cyber Security Awareness Forum session that day on networking online and offline as a career skill, and says the mentor's principles will be highlighted during it.

For brands planning a campaign

This post shows Scott Wright speaking from personal experience and crediting named people rather than offering generic advice — a plus for a webinar on culture and human risk, where authenticity matters. It also shows the Cyber Security Awareness Forum as a live venue a brand could be associated with.

The argument is that networking is a long-term process, not a one-off, and that relationships built over time become trusted sources of advice, collaboration, and career growth.

• The practical advice: make small contacts every few months and start long before you need your network.
• The post promotes a live panel of security professionals on 26 November at 1pm ET, then explains that the Cyber Security Awareness Forum is a community for security awareness managers, risk managers, CISOs, and others working on human risk and security culture.
• It says the forum is sponsored by Click Armor, described as an interactive security training platform, and links to a registration page.

For brands planning a campaign

This post shows the sponsorship pattern in action: a community body, a recurring live session, and a named platform sponsor acknowledged in the post. A training company proposing thought leadership should expect to take that sponsor slot, not own the audience, and should expect the creator to keep editorial advice separate from the sponsor mention.

One issue covers a Salesforce data breach, why employees discussing phishing tests is a positive signal, a CSAF networking session, and why end-of-year bonus news makes a poor phishing lure.

• Another covers spoofed AI browser sidebars, where AI belongs in a security program, a panel recording, and fake termination notices used in phishing.
• The newsletter serves as a regular digest and points readers to live sessions.

A curated roundup of distinct security items per issue, each with one-line framing, plus a call to the next live session.

For brands planning a campaign

A practical home for sponsor mentions and issue-level placements, reaching security awareness and human-risk practitioners with short, current commentary rather than a single long article. The multi-topic structure lets a brand appear in a themed roundup without needing to own a whole piece.

Examples: Source 1 · Source 2

The forum hosts live panel sessions on specific themes, promoted with a date, registration link, and open invitation. The CSAF is stated to be sponsored by Click Armor, an interactive security training platform.

Live panel discussions with invited security professionals, promoted through posts, the newsletter, and registration links.

For brands planning a campaign

A recurring live-session slot for a training or awareness vendor, either as a topic sponsor or panel participant.

• The sessions focus on human risk and awareness, so a webinar brief on those subjects would need little reframing.
• Ask for details of any sponsor relationship and how it will be disclosed.

Examples: Source 1 · Source 2 · Source 3

One issue argues that employees talking about a phishing test is a good outcome, not a failure, and that end-of-year bonus news is a poor choice of lure.

• Fake termination notices are called out as crossing a line.
• This is opinionated practitioner commentary, not neutral news.

Short commentary tied to current incidents and vendor behavior, explaining what awareness teams should take from each case.

For brands planning a campaign

A documented point of view on phishing simulations and awareness tactics. A vendor selling training or simulation software would be buying an informed position, not just reach, and should expect the content to reflect a stance on employee trust.

Examples: Source 1 · Source 2

The treatment is practical and defender-focused rather than speculative.

For brands planning a campaign

A timely hook for vendors with AI security, browser security, or AI governance products, especially when the message concerns attacker misuse rather than AI capability in the abstract.

Examples: Source 1

Scott Wright credits networking mentor Michael Hughes with the principle that networking is about the quality of relationships rather than the quantity, and frames a session around authenticity and contributing to the industry.

Panel sessions, personal anecdotes, and a named mentor's principles used as the teaching frame.

For brands planning a campaign

Community and career-development content suited to employers, recruiters, membership organizations, and cybersecurity training providers. Its emphasis on value and authenticity fits brand-education goals better than direct response.

Examples: Source 1 · Source 2

Scott Wright walks through common misconceptions about emergency access and names specific settings: Apple Legacy Contacts, Google Inactive Account Manager, and Facebook legacy settings. The point is the gap between who people assume can step in and who can actually access an account.

This is the clearest departure from the core security-awareness and human-risk theme of the other posts.

For brands planning a campaign

A topic that reaches privacy, estate planning, and identity audiences alongside security ones. For vendors in identity, password management, or privacy, it broadens a campaign beyond awareness training.

Examples: Source 1

The disclosure applies to the forum, not Scott Wright personally.

Original disclosure

The CSAF is sponsored by Click Armor, the first interactive security training platform designed to enable more effective remediation of employee vulnerabilities, build role-based security training and support engaging customized content creation.

View example

They describe it as a collaborative community for security awareness managers, risk managers, CISOs and others working on security awareness, human risk management and security culture. The posts don’t specify their formal relationship with the forum; ask whether they’re an employee, owner or contracted partner.

View example

Kevin Martin writes in a pointed dialogue format for security leaders and vendors, while Scott Wright runs a community forum and newsletter mixing practitioner commentary with professional networking and digital legacy topics.

Read original · Original 2

This practical career-development focus overlaps with Scott Wright's forum sessions for people building security careers.

Raymond Akpan focuses on entry paths and technical skills such as SOC, penetration testing, GRC, and cloud security, while Scott Wright centres on security awareness, human risk management, and professional networking for practitioners already in or adjacent to the field.

Read original · Original 2

Both translate AI-enabled threats into practical priorities for security leaders.

Salman Hussain focuses on Gulf-region executive impersonation, business email compromise, and browser AI privacy, while Scott Wright covers AI within broader awareness and human-risk programming.

Read original · Original 2

One post illustrates the gap with a CISO–security-awareness-lead dialogue and argues for combining signals such as identity, endpoint activity, credential exposure and responses to real threats.

• A second frames human risk management as proactive mitigation rather than annual training.
• Read the risk-measurement post and the post on the industry’s shift toward human risk management.

The posts make a pointed case for broader risk measurement, but do not provide supporting data or a detailed implementation example. They also offer less evidence of a recurring newsletter or live-panel format than Scott Wright’s posts.

Examples: Source 1 · Source 2

His post on AI-enabled impersonation recommends independent verification for sensitive requests, dual approvals and executive exposure reviews—practical steps for a discussion centered on business processes and trust. Read the executive-impersonation post.

The examples focus on executive fraud and concerns about AI features in software, rather than sustained coverage of security awareness or human-risk programs.

• Ask for evidence of an established webinar or community format.
• Read the post on AI features, transparency and user trust.

Examples: Source 1 · Source 2