Cybersecurity awareness training goes mainstream but still needs more work

guest · Sep 6, 2022

By Ian Barker @IanDBarker - September 6, 2022

Some form of cybersecurity awareness training has been implemented in 97 percent of enterprises this year, according to a new survey of 1,900 security professionals from ThriveDX.

However, only 42 percent report involving their employees in security detection with the use of such measures as a Phishing Incident Button, while 65 percent agree that their training program needs expansion.

"These statistics tell us two things. The first is that cybersecurity awareness is now reaching its adolescence with almost universal agreement that regular training improves enterprise security in a way that technology alone cannot," says Aaron Bostick, CISO, North America at ThriveDX.
"Secondly, these numbers show us that we still have a long way to go to reach maturity and an understanding that the only true way to mitigate modern cyber risks is by positively changing employee behavior and building positive security cultures within our companies."
Click to expand...

Training clearly pays off, with 19 percent reporting better awareness; 14 percent greater vigilance; 12 percent saying they increased their 'human firewall' and 99 percent reporting an increase in corporate security. 96 percent also note a positive influence on their enterprise's overall working atmosphere.

The full study is available from the ThriveDX site.
Click to expand...

guest · Sep 6, 2022

Hoxhunt Primed to Spread Gamified Phishing Awareness in the Enterprise
By Owais Sultan @owais49892846 - September 4, 2022

Increasing phishing awareness requires developing the right mindset, behavior, and engagement in employees. This is where cybersecurity awareness training platform Hoxhunt looks to make a significant impact, by offering personalized and gamified training experiences that enhance workers’ cybersecurity awareness.

Through automated phishing attack simulations used as micro-learning opportunities, the platform takes workers as close to experiencing real-world phishing attacks as possible. It sends targeted emails to employees within an organization, which are highly personalized to mimic the deception used in modern phishing attacks.
The simulated attacks go out in varying frequency as opposed to regular intervals, making the attacks more unpredictable. There is also a variation on who receives these messages to keep everyone on their toes.
Click to expand...

The region needs to raise its cybersecurity awareness profiles since countries like the United States and Canada continue to be active targets of phishing campaigns.

Indeed, phishing attacks have been escalating, and businesses need to shore up their defenses against them. It is not enough to rely on conventional defenses like spam and web filters, because phishing is evolving. Today’s malicious actors are able to ensure that their fake emails and links to spoofed websites get through even the latest filters of sophisticated providers.
Once they do, workers become the enterprise’s last line of defense against devastating cyberattacks.
Click to expand...

Continuous Upskilling as a Pivotal Defense
With this in mind, enterprises must focus on consistently upgrading their employees’ cybersecurity skills and reporting habits on an ongoing basis. Workers should not just be able to tell legitimate and fake messages apart, they should also react accordingly. Reporting phishing messages help improve spam filters, stops the messages from spreading, and prevents their potential malware attachments from getting into the network.
Click to expand...

Log in or Sign up

Cybersecurity awareness training goes mainstream but still needs more work

guest Guest

guest Guest

Log in or Sign up

Cybersecurity awareness training goes mainstream but still needs more work

guest Guest

guest Guest

Useful Searches