Employee risk recognition and reporting of malicious elicitations: longitudinal improvement with new skills-based training.

Numerous security domains would benefit from improved employee risk recognition and reporting through effective security training. This study assesses the effectiveness of a new skills-based training approach to improve risk recognition and reporting of malicious elicitations. Malicious elicitations are techniques that strategically use conversation (i.e., online, in writing, in person, or over the phone) with the sole purpose of collecting sensitive, non-publicly available information about business operations, people, or technological assets without raising suspicion. To an untrained observer, a skilled elicitor can make conversations seem analogous to many professional networking situations such as those experienced over email and at conferences. A 12-month longitudinal experimental study was conducted to test training effectiveness on employees of a large corporation that focuses on serving national security needs and the public interest. Half of participants were randomly assigned to receive traditional awareness-based training (i.e., reviewing informational slides) while the other half of participants received a new skills-based training that allowed them-over the course of five weeks-to iteratively practice skills learned in the training and receive feedback on their performance in their day-to-day work environment. Following training for both experimental groups, malicious elicitations and benign professional networking test messages were sent (via email & text message) to unaware employee participants for 12 months. Findings revealed that skills-based training improved reporting of malicious elicitations and lasted for up to 12 months compared to traditional awareness-based training.

Fiscal Year 2018 National Defense Authorization Act, Section 734, Weapon Systems Line of Inquiry: Overview and Blast Overpressure Tool-A Module for Human Body Blast Wave Exposure for Safer Weapons Training.

INTRODUCTION: Experiences by service members in recent conflicts and training environments illuminate concerns about the possible effects of blast overpressure (BOP) exposure on brain health. Section 734 of the National Defense Authorization Act for Fiscal Year (FY) 2018 (Public Law 115-91) requires that the Secretary of Defense conducts a longitudinal medical study on blast pressure exposure of members of the Armed Forces during combat and training, and the Assistant Secretary of Defense for Health Affairs was assigned responsibility for fulfilling requirements. The study's goal is to improve DoD's understanding of the impact of BOP exposure from weapon systems on service members' brain health and inform policy for risk mitigation, unit readiness, and health care decisions. This article focuses on the activities of the Weapon Systems Line of Inquiry (LOI) and the development of a prototype BOP Tool. MATERIALS AND METHODS: The DoD established the Section 734 Workgroup, which developed a program structure with five LOIs. The Weapon Systems LOI coordinated, collated, and analyzed information on BOP resulting from heavy weapons and blast events to inform strategies, and accounted for emerging research on health effects and performance. Ongoing research was leveraged to develop a BOP Tool as a standalone module and for integration into the Range Managers Toolkit. RESULTS: The effort identified opportunities for the DoD to improve the clarity of communications about BOP exposure, risk, and safety; establish methods to leverage emerging research; and develop a prototype BOP Tool to predict exposure loads when firing heavy weapons in training. CONCLUSIONS: It is recommended that the DoD revises requirements and policy to improve and standardize safety guidance throughout research, development, testing, and evaluation; acquisition; and training. The validated BOP Tool allows users to generate a scenario to predict BOP exposure and allows service members to modify them during planning for safer training.