https://rishipalyadav.github.io/tags/design-thinking/Recent content in Design-Thinking on Rishipal Yadav · not your CISOHugo -- gohugo.ioen© 2026 Rishipal YadavSat, 27 Apr 2024 00:00:00 +0000https://rishipalyadav.github.io/posts/security-awareness-design-thinking/Sat, 27 Apr 2024 00:00:00 +0000https://rishipalyadav.github.io/posts/security-awareness-design-thinking/<blockquote><p><em>This article was originally published on <a href="https://notyourciso.medium.com" target="_blank" rel="noreferrer">not your CISO</a> on Medium. <a href="https://notyourciso.medium.com/security-awareness-training-a-design-thinking-project-c06686163480" target="_blank" rel="noreferrer">Read the full post →</a></em></p> </blockquote><p>During the last semester (Spring 2024) of my Master of Engineering in Cybersecurity at the University of Maryland, College Park, I joined the Innovation Fellowship cohort at the Academy for Innovation and Entrepreneurship. The project: apply design thinking to security awareness training.</p> <p>Security awareness training has a reputation problem. Compliance teams love it. Employees hate it. And the data on whether it actually changes behaviour is, at best, mixed. The question I started with was: what would security awareness training look like if you designed it the way a product designer would — starting with the user, not the policy?</p>