State of Security Awareness Training White Paper

This white paper presents the findings of a survey conducted by Osterman Research regarding security awareness training in organizations. The document outlines the importance of security awareness training as a critical component of an organization's security infrastructure, particularly in combating phishing attacks. It details the current challenges faced by organizations in implementing effective training programs and highlights the gaps in existing training trends. The paper emphasizes that while security budgets are increasing, the allocation for awareness training is growing at a faster rate. It also notes that many organizations are not providing adequate training frequency, with a significant number of employees receiving training only once a year or less. The research indicates that decision-makers view awareness training as superior to technology solutions for addressing phishing threats. The paper concludes with recommendations for continuous, data-driven training methodologies that can adapt to employee learning patterns to enhance effectiveness.