It seems like every day there is a new attack or vulnerability 'excitedly' talked about on the news, but lets be serious - the majority of people aren't effected. The OPM breach hit roughly 5% of the population. Even identity theft effects only 30% of the population. So InfoSec sounds like the boy in the "Boy who Cried Wolf. The solution is communication. However, what we need to do is condense the fire hose of information, vulnerabilities, risk, and security into something that is flexible enough to keep up with the pace, useful enough to help, and simple enough to grasp quickly. One answer, IMHO, is storytelling. Bah, humbug, you say. I'm an adult/professional who deals with serious topics. Telling stories won't impress people. But before you dismiss storytelling, come join me as I tell the (non-tall) tale of how stories help people live and practice InfoSec.