Teaching Young Dogs Old Tricks: A Cyber Security Lesson

Most people have heard the saying: “You can’t teach an old dog new tricks.”

It is often used when discussing technology, cyber security, or people who appear resistant to change. But perhaps the real challenge facing organisations today is not teaching older employees new tricks. Perhaps it is teaching younger employees the old tricks. The timeless lessons that helped previous generations recognise deception, challenge unusual requests and think before acting. Because whilst technology evolves at an incredible pace, human psychology changes very little.

The Same Tricks, Different Tools

Criminals love new technology. They use artificial intelligence, social media, cloud services and sophisticated phishing platforms to target organisations of every size. However, the techniques they use are often surprisingly familiar.

They create urgency. They impersonate trusted individuals. They exploit curiosity. They encourage people to act before they think. These are the same confidence tricks that criminals have used for generations. The only difference is that instead of a knock at the door, the approach now arrives via email, text message, social media or a collaboration platform.

The technology has changed, the manipulation has not.

Why Experience Still Matters

Many experienced employees have developed instincts that are difficult to teach from a textbook. They know when something does not feel right. They have encountered scams before. They understand the value of verification. They are often comfortable challenging unusual requests and asking questions before acting. These behaviours are not technical skills, they are life skills, and they can be incredibly valuable in helping organisations reduce cyber risk.

Teaching Young Dogs Old Tricks

Many younger employees have grown up in a highly connected world, sharing information online is normal. Communication is instant, clicking links is routine. Trust is often established through digital interaction rather than personal relationships. There is nothing inherently wrong with this, however, it creates opportunities for criminals who understand how people behave online. Good cyber awareness training should not focus solely on technology. It should reinforce simple principles that have stood the test of time:

Trust, but verify.
Pick up the phone and check.
Question unusual requests.
Don’t be rushed into making decisions.
Stop and think before clicking.
Ask for help when something feels wrong.

These lessons may be old, but they remain some of the most effective cyber defences available.

Cyber Security Is a Human Challenge

Many organisations invest heavily in technology while overlooking the importance of people. Firewalls, antivirus software and security monitoring all play an important role, however, most cyber incidents still involve a human decision somewhere along the attack chain. A clicked link, a shared password, a trusted request that was never verified, or a payment approved without challenge.

Technology helps, but people make the difference. That is why creating a culture where employees feel confident asking questions, reporting concerns and challenging unusual activity is often one of the most valuable investments an organisation can make.

Practical Recommendations

Deliver regular cyber awareness training using real-world examples.
Encourage employees to verify unusual requests through a second communication method.
Create a culture where people feel comfortable asking questions.
Share lessons learned from incidents and near misses.
Focus on behaviour and decision-making rather than technical jargon.
Reinforce simple messages consistently throughout the year.

Final Thought

Cyber security is not a battle between old people and new technology. It is about helping people recognise risk, make better decisions and develop habits that reduce the likelihood of harm. Some of the most valuable cyber lessons are not new at all. They are the same principles that have protected people from fraudsters, confidence tricksters and criminals for decades. So perhaps the saying should be updated:

“You can’t teach an old dog new tricks, but you can teach a young dog old tricks.”

And in cyber security, some of those old tricks may be exactly what we need.

Need Support?

Whether you are responding to a cyber incident, reviewing your preparedness or looking to improve awareness across your organisation, White Rock Advisory provides practical guidance backed by real-world experience.