What do you use for your annual employee security training?

Security Strategy & RoadmapAwareness & Training

A training purchased from a vendor39%

Freely available open-source training material42%

A training created by your company17%

214 PARTICIPANTS
1.5k viewscircle icon2 Comments
Sort by:
Mission Diplomatic Technology Officer in Governmenta year ago

An automated online training package with a 10 question quiz.

The level of effort is about 15 to 20 minutes to go through the slides and exercises. A hundred thousand employees have to take it once a year and without it, your network access is disabled.

Deputy CISO2 years ago

Multiple: Home grown targeted content, Vendor leveraged content, and a user-experience driven content too 

Content you might like

How are you currently managing SIEM costs? Have you found effective ways to actually reduce storage costs for your SIEM?

Read More Comments

Is footprinting an effective way to do vulnerability management?

Very effective1%

Somewhat effective52%

Slightly effective31%

Slightly ineffective8%

Somewhat ineffective3%

Not at all effective

Not sure yet1%

View Results

As part of our NYSE IPO prep, we’re debating how to communicate our system hardening efforts in regulatory disclosures (e.g., SEC Form 20-F, SFC).

Would you recommend sharing % compliance (e.g., “85% CIS Tier 2”) or sticking to qualitative descriptions of how we identify and mitigate risks? Also, do SFC/ISO 27001 expectations require full ISMS integration, or is a % model acceptable?

What would you say is the key component of your Security Awareness Program?

Video Training17%

Phishing Simulations63%

Infographics12%

Gaming5%

Other (please share below)

View Results

How are you making sure the security team has visibility into social engineering attempts on helpdesk staff, especially with attacks using voice impersonation or other deepfake techniques?