Is Your Phishing Program Backfiring? Fix It Fast |Craig Taylor | Ep. 134

Most security programs don’t fail because people “don’t care.” They fail because we accidentally train employees to hide mistakes. In Talk To Th3 Doc – Episode 134, I’m joined by Craig Taylor (Co-Founder, CyberHoot | vCISO | CISSP) to break down why “gotcha” phishing tests backfire, how positive reinforcement builds real security habits, and why leaders should simplify policies into bite-sized actions people will actually follow. Top Takeaway: “You need muscle memory.” Who this is for: SMB owners, executives, IT leaders, and public-sector leaders in DFW / Keller, TX who want practical cybersecurity that improves behavior—without creating fear or friction. What we cover Why “gotcha” phishing tests create silence, not safety The behavior metrics that matter (reporting + response habits) How to create a healthier security culture using positive reinforcement Why long security policies fail—and what to do instead Why MFA + simple habits reduce real-world risk Where third-party/vendor risk sneaks in Chapters 00:00 Cybersecurity mindset for leaders 03:05 Cost of breaches + business impact 06:08 Downtime, disruption, and distraction 08:49 Threat psychology: why attackers win 11:55 AI and cybersecurity—what’s changing 14:56 Training that works (positive reinforcement) 20:58 Engagement metrics that matter 32:32 Why “one-and-done” training fails 39:00 Policies people will actually follow 40:11 Bite-sized policies for compliance 46:30 Third-party/vendor risk 51:37 What leaders should fund first Guest Links (Craig Taylor / CyberHoot) CyberHoot: https://cyberhoot.com/ Free personal training: https://cyberhoot.com/individuals/ Newsletter: https://cyberhoot.com/newsletters/ Cybrary (cyber terms): https://cyberhoot.com/cybrary/ LinkedIn: https://www.linkedin.com/in/craigmtaylor/ 🎁 20% off (1 year): Coupon code Talk to the Doc Need help building a security program that actually sticks? At The Fulcrum Group, Inc. (Keller, TX) we deliver outcomes through SPOT Managed IT Services, SPOT Managed Security Services, and the STARPower Framework—powered by our “No IT Jerks” philosophy. 👉 Start here: https://www.fulcrumgroup.net/talk-to-th3-doc-podcast/ ✅ Subscribe for weekly episodes on cybersecurity, leadership, and smart IT decisions for growing organizations. ✅ Hashtags #TalkToTh3Doc #Cybersecurity #Phishing #SecurityAwarenessTraining #vCISO #MFA #DFWBusiness #ManagedITServices #ManagedSecurityServices #KellerTX