Somewhere around the fourth red-and-black slide, showing a hooded figure typing menacingly at a laptop, something predictable happens in the room: people stop leaning forward and start checking their phones. The presenter, mistaking silence for gravity, adds another statistic. The room gets quieter. Nobody remembers a single action item by Monday. This is the part nobody puts in the retro notes — the presentation "went well" and changed almost nothing.

I've sat through enough of these to notice a pattern that has nothing to do with the seriousness of the threat, which is very real, and everything to do with what the slide is actually asking the audience to feel versus do.

The slide that's supposed to scare you into caring

Open a cybersecurity deck built by a well-meaning IT team and you'll usually find one slide doing all the emotional heavy lifting: a countdown of "days since last incident," a wall of red icons, a quote about how attacks happen "every 39 seconds." It's dramatic. It's also, in my experience, the single least persuasive slide in the deck — not because the numbers are wrong, but because the slide never answers the question it just raised in the audience's head: okay, so what do I personally do differently at 2pm tomorrow?

Fear works as a spotlight. It does not work as a compass. A slide can make someone's pulse tick up for ninety seconds and still leave them with zero idea what behavior actually changes.

Fear without a next step isn't a warning, it's just noise

This isn't just a hunch about attention spans. Research summarized from work published in Frontiers in Human Neuroscience describes what happens when a message leans on threat severity without pairing it to something the person can actually control: it pushes people toward anxiety and disengagement rather than the vigilance the presenter wanted. In other words, the brain doesn't file "I am now more careful" — it files "this is scary and also not really my problem to solve," and moves on.

Here's the twist that makes fear-heavy security messaging worse than just ineffective: published research from Beauceron Security found that employees who feel afraid of getting in trouble for clicking a phishing link are roughly half as likely to actually tell anyone they clicked it. So the deck built to make people more vigilant can, in a very literal sense, make the same people more likely to hide the mistake that most needs reporting fast. That's not a tone problem you fix with a friendlier font. It's the slide actively working against its own goal.

The "everything we found" slide is doing the panic's job for free

Somewhere between the intro and the recommendations sits the slide every security presentation seems to grow on its own: a table of every vulnerability the audit turned up, sorted by severity, twelve rows deep, in red. Nobody set out to build a wall of red text — it accreted, one "can we also add this finding" at a time, until the slide stopped being a chart and became a spreadsheet wearing a chart's clothes.

The room doesn't process twelve findings. It processes "there are twelve things wrong and I understood none of them," which produces exactly the shutdown response the whole presentation was trying to avoid. This is basically the same failure pattern worth cutting from any presentation — the slide that grew instead of being decided on. Keep the full findings list as an appendix. Show the room the two or three that actually change what they should do this quarter, and let the rest exist somewhere people can find it if they ask.

Every security deck looking identical is part of what makes them feel alarming

Here's the part that's a little embarrassing to admit as someone who's built these decks: a huge share of the "panic" isn't the content, it's the aesthetic. Dark background, red accent color, lock icons, a shield graphic somewhere near the title — it's become such a fixed visual grammar for "cybersecurity" that the format itself now reads as a threat before the presenter says a single word. Which might sound like a feature. In practice it means the audience walks in braced for a lecture, and braced-for-a-lecture is not the same mental state as ready-to-listen.

This isn't unique to security topics — it's the same drift toward "default" that happens across most corporate decks, just with a scarier default palette. A calmer visual register — neutral colors, restrained icons, an actual diagram of the attack path instead of a stock photo of a hacker in a hoodie — doesn't make the topic less serious. It just stops signaling "brace yourself" before the audience has had a chance to hear the actual point.

Panic isn't a design style — hierarchy is the thing missing

What tends to replace panic, once you strip it out, isn't blandness. It's hierarchy: one clear thing the audience is meant to understand first, stated plainly, with everything else supporting rather than competing with it. The same principle that makes a consulting-style slide legible under pressure applies directly here — a slide that says "this is the one behavior that would have stopped last quarter's near-miss" does more than a slide screaming that attacks happen every 39 seconds, because it gives the brain something specific to hold onto instead of a diffuse sense of dread.

I wouldn't recommend stripping urgency out entirely, either — a security talk with zero stakes attached is its own kind of useless, the corporate-safe version of the same mistake. The fix isn't less seriousness. It's replacing vague, universal dread with a specific, personal instruction.

What actually moves people to act

The presentations I've seen genuinely change behavior tend to share one unglamorous trait: they spend less time proving the threat is real — audiences mostly already believe that part — and more time showing exactly what a good response looks like, in a scenario close enough to the viewer's actual job that they can picture doing it. That's a harder slide to build than a red countdown timer. It's also the one people can still describe a week later.

Next time a security deck crosses your desk, try one test before it ships: cover the scary slide and ask what single action the audience is supposed to take away from it. If the honest answer is "be more careful," that slide isn't finished yet — it's just alarmed.