{"id":773445,"date":"2026-07-01T14:27:13","date_gmt":"2026-07-01T14:27:13","guid":{"rendered":"https:\/\/www.newsbeep.com\/ca\/773445\/"},"modified":"2026-07-01T14:27:13","modified_gmt":"2026-07-01T14:27:13","slug":"what-a-financial-planner-taught-me-about-cybersecurity","status":"publish","type":"post","link":"https:\/\/www.newsbeep.com\/ca\/773445\/","title":{"rendered":"What a financial planner taught me about cybersecurity"},"content":{"rendered":"

When I spoke at a recent cybersecurity awareness event for financial planners and tax advisors, the audience really engaged with the subject<\/a>.<\/p>\n

As happens at conferences the world over, people often come up to speakers to ask follow-up questions, or just give their feedback about points made during the presentation. This time, it struck me how many of them said they had been scared by what they heard during my talk. <\/p>\n

As I made my way back to the office, that word \u201cscared\u201d was like one of those tunes you hear that constantly replays in your mind. My immediate reaction was to think that I hadn\u2019t succeeded in raising awareness about security threats and risks<\/a>. It also made me wonder whether we in the cybersecurity industry sometimes make things harder than they need to be by describing risks in ways that sound frightening, technical, or overwhelming to people who simply want to understand what they need to do to better protect themselves and their businesses.<\/p>\n

The problem with how we talk about threats<\/p>\n

As anyone who has seen me speak knows, I\u2019m not one for throwing my hands up in the air and declaring the world is about to end or indulging in irresponsible hype. I don\u2019t believe in selling security by fear, uncertainty, and doubt, otherwise known as FUD. I\u2019ve always believed that one of my roles is to raise awareness of information security<\/a> as an important business issue, not to scare people into buying more stuff. <\/p>\n

I naturally tend to look at any new or emerging security threat and automatically think of it simply as a risk to be managed. But because of my line of work as a security consultant, am I so used to talking about data breaches, CEO fraud, or ransomware in a measured way that I don\u2019t realise the extent to which it frightens other people who aren\u2019t as immersed in this area as me.<\/p>\n

Thinking about it some more a while later, remembered a conversation with one of the organisers just before the event. This person was in the financial planning business, so naturally he asked me if I had appropriate protection both for my business and for myself personally. I had always thought that I had most boxes ticked from an insurance or pension perspective, but his conversation got me thinking, and yes, I\u2019ll admit it made me slightly afraid that maybe I was missing some crucial piece to ensure I was fully protected. <\/p>\n

What it feels like to be the non-expert in the room<\/p>\n

I\u2019m pretty sure his intention wasn\u2019t to scare me. All he was doing was applying his domain knowledge to my situation. It was me, as a non-expert in financial matters, who reacted the way I did.<\/p>\n

Ultimately, each of us is an expert in our own field. The event organiser happened to work in financial planning, so pensions and insurance<\/a> were a natural conversation starter, just as information security would be for me. For many of us, venturing into areas beyond our own expertise can provoke varying degrees of worry or anxiety. To the uninitiated, any talk of technology is enough to tip their needle towards outright panic. <\/p>\n

Part of the problem is the language we use. In cybersecurity we talk about \u201cthreat actors\u201d, \u201cAdvanced Persistent Threats\u201d, \u201cphishing campaigns\u201d and \u201ccompromised credentials\u201d. To us, these are everyday terms, but to everyone else, they can sound like something from a spy novel. In reality, we\u2019re often talking about criminals, scams, fraud<\/a>, and people trying to trick us into handing over money or information.<\/p>\n

The goal is confidence, not expertise<\/p>\n

When people feel overwhelmed by warnings about cybercrime, they often react in one of two ways: some dismiss the advice because it feels too complicated or alarmist, others become so worried about making a mistake that they avoid using technology altogether. Neither response helps.<\/p>\n

From a security perspective, my recent experience was a valuable reminder that what we in the profession perceive as normal and everyday can be a frightening subject to anyone outside the bubble. <\/p>\n

The truth is, many of us in business rely on the expertise and knowledge of other professionals, whether that\u2019s legal<\/a>, finance or PR. Many of them will use terms we\u2019re not familiar with. It\u2019s not our job to be experts in those domains but to be sufficiently well informed to ask the right questions of those who are providing us with that expertise. <\/p>\n

On the flip side of that, if we\u2019re the ones being asked to share our knowledge to provide guidance, it\u2019s up to us to think about how we deliver the message to educate, not intimidate. <\/p>\n

Cybersecurity should not be about frightening people with stories of hackers, breaches, and worst-case scenarios. It should be about helping people understand the practical steps they can take to reduce risk. <\/p>\n

The goal is not to turn everyone into cybersecurity experts, but to help people recognise scams, ask good questions, make informed decisions, and feel confident using technology. If people leave a security presentation feeling empowered rather than frightened, then we\u2019ve done our job properly.<\/p>\n","protected":false},"excerpt":{"rendered":"When I spoke at a recent cybersecurity awareness event for financial planners and tax advisors, the audience really…\n","protected":false},"author":2,"featured_media":773446,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[14],"tags":[274474,274475,45,49,48,283,133,131,132,274476],"class_list":["post-773445","post","type-post","status-publish","format-standard","has-post-thumbnail","category-personal-finance","tag-bh-consulting","tag-brian-honan","tag-business","tag-ca","tag-canada","tag-cybersecurity","tag-finance","tag-personal-finance","tag-personalfinance","tag-security-awareness"],"_links":{"self":[{"href":"https:\/\/www.newsbeep.com\/ca\/wp-json\/wp\/v2\/posts\/773445","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.newsbeep.com\/ca\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.newsbeep.com\/ca\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/ca\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/ca\/wp-json\/wp\/v2\/comments?post=773445"}],"version-history":[{"count":0,"href":"https:\/\/www.newsbeep.com\/ca\/wp-json\/wp\/v2\/posts\/773445\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/ca\/wp-json\/wp\/v2\/media\/773446"}],"wp:attachment":[{"href":"https:\/\/www.newsbeep.com\/ca\/wp-json\/wp\/v2\/media?parent=773445"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.newsbeep.com\/ca\/wp-json\/wp\/v2\/categories?post=773445"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.newsbeep.com\/ca\/wp-json\/wp\/v2\/tags?post=773445"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}