Abstract

People complete awareness training, pass phishing tests, and still fall for cyber attacks because they never internalize how cybersecurity connects to their own work. This talk introduces the Cybersecurity Strategy Canvas, a one-page, nine-block framework inspired by the Business Model Canvas. In a facilitated workshop, each department maps their assets, threats, vulnerabilities, safeguards, and business impact, creating ownership that no training module can match. You'll leave with a printable canvas and facilitation guide ready to use Monday morning.