Why Organizations Adopt Security Awareness Training—and How to Avoid Common Mistakes

· Original article ↗

Summary

A survey cited in the article found 93% of responses linked security awareness training adoption to a trigger event. It outlines common triggers and advises building programs around lasting security outcomes, not just compliance.

Key points

  • The article cites a LinkedIn survey started by Curricula co-founder Nick Santora; 93% of responses reportedly traced security awareness training adoption to a trigger event.
  • Common triggers include compliance requirements, a cyber incident, vendor demands for proof of security education, and cyber insurance requirements.
  • The article says organizations often struggle to secure management buy-in and budget until a trigger event occurs.
  • It warns against rushed vendor selection, treating compliance as a box-checking exercise, and neglecting employee buy-in.
  • It recommends proactive training focused on building a security culture and improving employee decisions, rather than simply completing training or meeting a requirement.

Article Details

Topic
Trigger events that lead organizations to implement cybersecurity awareness training, and guidance for building effective programs.

People

Vendors

Products

Related Articles