Vanity Metrics - Cary Johnson on Why Benchmarks Fail and Baselines Matter episode artwork

EPISODE · Dec 20, 2025 · 1H 9M

Vanity Metrics - Cary Johnson on Why Benchmarks Fail and Baselines Matter

from The Awareness Angle: Security Awareness and Human Risk · host Risky Creative - Cyber Security for Humans

Subscribe on your favourite platforms and visit https://linktr.ee/riskycreative for more of ∠The Awareness Angle.This week on The Awareness Angle Interviews, Ant sits down with Cary Johnson, founder of Phishbusters, for a straight talking conversation about security awareness, human risk, and why so many programmes struggle to prove real impact.This episode strips away dashboards, buzzwords, and vendor narratives to focus on what actually reduces phishing risk. Cary brings a science led perspective to awareness, challenging engagement metrics, benchmarks, and the idea that looking busy means you are becoming more secure.We get into phishing as a measurement tool rather than a content engine, why repeat clickers are not all the same, and how poor measurement can quietly create fatigue, resentment, and false confidence across organisations.If you work in security awareness, human risk, or phishing defence, this conversation will challenge how you think about success.We talk about Why engagement does not equal impact Benchmarks versus baselines, and why the difference really matters Phishing as the number one human risk Repeat clickers, learners, and where risk actually sits Why overtraining creates fatigue and resentment Verification skills and keeping awareness simple Compliance theatre and the danger of vanity metrics Vendors marking their own homework How to test whether your programme is genuinely workingThis is a calm but challenging discussion that says the quiet part out loud. It shows how easily good intentions can turn into noise when measurement is flawed, and how much simpler awareness can be when we focus on proof instead of performance.Let me know what it gets you thinking about.Stay aware, stay secure.Previous Episodehttps://www.youtube.com/watch?v=EntRmhcDOBM&list=PLEsOj51Q0PfA0qX6BRlNnyD7lG8JlijRfLinksYouTube: https://www.youtube.com/@riskycreativeLinkedIn: https://www.linkedin.com/company/riskycreativeSpotify: https://open.spotify.com/user/riskycreativeWebsite: https://www.riskycreative.comContact: [email protected] and outro music16! by falling foreverhttps://fallingforever.bandcamp.com/track/16License: CC BY 4.0https://creativecommons.org/licenses/by/4.0

NOW PLAYING

Vanity Metrics - Cary Johnson on Why Benchmarks Fail and Baselines Matter

0:00 1:09:40

No transcript for this episode yet

We transcribe on demand. Request one and we'll notify you when it's ready — usually under 10 minutes.

Frequently Asked Questions

How long is this episode of The Awareness Angle: Security Awareness and Human Risk?

This episode is 1 hour and 9 minutes long.

When was this The Awareness Angle: Security Awareness and Human Risk episode published?

This episode was published on December 20, 2025.

What is this episode about?

Subscribe on your favourite platforms and visit https://linktr.ee/riskycreative for more of ∠The Awareness Angle.This week on The Awareness Angle Interviews, Ant sits down with Cary Johnson, founder of Phishbusters, for a straight talking...

Can I download this The Awareness Angle: Security Awareness and Human Risk episode?

Yes, you can download this episode by clicking the download button on the episode player, or subscribe to the podcast in your preferred podcast app for automatic downloads.
URL copied to clipboard!