Is Security Awareness Training Effective?

Hey, it's a great question! Short answer: VERY. Long answer: read on!

Ok, you won't be surprised to find out that: Yes, Security Awareness Training is (very) effective!

Otherwise, why are you having me write this blog?!

Just in case: if you're unfamiliar, start with an overview on Security Awareness Training. Then hurry on back here!

And let's jump in...

What is Security Awareness Training effective against?

Now you've asked a key question, since some things are effective at nothing more than shaking down your IT budget. Oops! Said it...

SAT is specifically effective against Social Engineering and Phishing attacks. These are the strategies that drive over 90% of cybercrime. Don't take our word for it - that's according to Verizon's Data Breach Investigations Report.

Regular instruction, frequent testing and remedial training are critical to maintaining a secure network.

That's 9 out of every 10 attacks! If I told you that wearing a seatbelt would help protect you in 9 out of 10 car wrecks, maybe you'd throw that ole belt on each time??

How is Security Awareness Training effective?

To answer that question, we need to identify WHY the attackers are so successful with Social Engineering and Phishing.

Phishing "clickers" typically start in the 35-55% range for an organization just beginning their SAT program.

They're effective because people are... people! We can be fooled and manipulated. We are vigilant at times and disinterested at others. We are on a high after a promotion and stressed after a reprimand. Any emotional state or stress level can lead to risks to your organization.

A successful SAT program teaches your team about security threats while also helping them identify behavioral solutions.

On average, clicking rates decline to under 5% after the first year.

To put some numbers around it, Phishing clickers typically start in the 35-55% range (usually depending on industry) for an organization just beginning their SAT program. As time progresses, your people improve, and we then typically see clicking rates decline to under 5% after the fist year.

This is done with consistent Training courses and continuous Phishing attack simulations. One and done simply isn't a thing in this world. Regular instruction, frequent testing and remedial training are critical to maintaining a secure network.

What's next? Take a look at our guide to choosing a Security Awareness Training program for your company.

And hey, if you're ready to take the next step, we make it as easy as clicking that buckle.