What do you use for your annual employee security training?

Security Strategy & Roadmap Awareness & Training

A training purchased from a vendor41%

Freely available open-source training material42%

A training created by your company16%

213 PARTICIPANTS

1.5k views2 Comments

Sort by:

Mission Diplomatic Technology Officer in Governmenta year ago

An automated online training package with a 10 question quiz.

The level of effort is about 15 to 20 minutes to go through the slides and exercises. A hundred thousand employees have to take it once a year and without it, your network access is disabled.

Deputy CISO2 years ago

Multiple: Home grown targeted content, Vendor leveraged content, and a user-experience driven content too

Content you might like

Will API security be one of your 2023 initiatives?

Yes41%

API security is a current initiative36%

No13%

Not sure yet9%

Other (please explain in the comments)

View Results

What percentage of your team’s time is allocated annually for upskilling and training initiatives?

Do you reward employees in any way for reporting suspicious emails or other social engineering attempts?

Yes58%

Only in some cases28%

No13%

View Results

What adjustments are you planning to make to your org’s cyber budget for 2026 (if any)?

When it comes to running phishing simulation campaigns. What is the best practice on how often they should be run and at what cadence should phishing simulation emails be sent out? Some organizations only run a campaign once per quarter sending out a simulated phishing email about once per week while other organizations run continuous campaigns sending out phishing simulations about once every 2 weeks. What are other organizations doing and what is the best practice?