Security Awareness Blog

SANS MGT433 Course Coming to London

SANS MGT 433 is a two day course that enables organizations to build high-impact, engaging awareness programs with a focus on changing behaviors. Based on the lessons learned from hundreds of organizations, we have been teaching this course for over three years now. The biggest hits of the course are the student interaction and … Continue reading SANS MGT433 Course Coming to London


Industrial Control Systems (ICS) Security Awareness Poster

One of the challenges we face in the Industrial Control System (ICS) community is awareness. People maintaining our critical infrastructure do not realize how fragile and targeted the supporting cyber systems are, including PLCs, Relays, RTUs and entire SCADA networks. This poster was developed by a community team of industry ICS experts to help ICS … Continue reading Industrial Control Systems (ICS) Security Awareness Poster


Top 3 Indicators of a Next Generation Awareness Program

Security awareness has gone through immense changes in the past two years. It has quickly grown from a compliance driven, once a year dreaded event to an engaging solution focused on changing behaviors. Here are the top three indicators a program is truly a 'next generation' awareness program. 1. Behavior: The biggest indicator is the … Continue reading Top 3 Indicators of a Next Generation Awareness Program


Upcoming SANS Courses on Building High-Impact Awareness Programs

Folks, I'm excited to announce there are two more upcoming SANS MGT 433 courses. This is SANS' two day course on how to build high-impact, engaging security awareness programs. The content is based on the input, experiences and lessons learned of over 200 organizations. Students love the interaction with their peers and as part … Continue reading Upcoming SANS Courses on Building High-Impact Awareness Programs


Security Awareness 2.0 - Awareness Has Come a LONG Way

One of the biggest challenges security awareness faces is one of perception, many people in the security community have the misconception that awareness does not work. That is because they are basing their judgements on the past. Security awareness has traditionally been horribly broken, it had nothing to do with changing behaviors or even people, … Continue reading Security Awareness 2.0 - Awareness Has Come a LONG Way