Why Organizations Adopt Security Awareness Training—and How to Avoid Common Mistakes

Summary
A survey cited in the article found 93% of responses linked security awareness training adoption to a trigger event. It outlines common triggers and advises building programs around lasting security outcomes, not just compliance.
Key points
- The article cites a LinkedIn survey started by Curricula co-founder Nick Santora; 93% of responses reportedly traced security awareness training adoption to a trigger event.
- Common triggers include compliance requirements, a cyber incident, vendor demands for proof of security education, and cyber insurance requirements.
- The article says organizations often struggle to secure management buy-in and budget until a trigger event occurs.
- It warns against rushed vendor selection, treating compliance as a box-checking exercise, and neglecting employee buy-in.
- It recommends proactive training focused on building a security culture and improving employee decisions, rather than simply completing training or meeting a requirement.
Article Details
- Topic
- Trigger events that lead organizations to implement cybersecurity awareness training, and guidance for building effective programs.
People
Vendors
Products
Huntress Managed SATHuntress Managed SAT’s new Threat Simulator gives your learners hands-on experience with a variety of tradecraft, not just phishing. Learners carry out simulated threats from the hacker’s POV to get a betterThreat SimulatorRead more about Breaking Down Barriers in SAT: Introducing Huntress Threat Simulator