Every day, passionate security professionals encounter a common problem: after bringing a student or colleague up to speed on best practices, it feels like nothing stuck. Why does this happen? And how can we change it up to get better outcomes? This talk will help IT and security professionals find common ground with non-technical users. In addition to sharing people-friendly metaphors, it will give attendees a solid set of communication strategies, and approaches to educate the average user about the mindset behind security to develop secure behaviors. And yes–spoiler alert–there will definitely be some Lord of the Rings involved!