Security Awareness & Training Resource Center
Featured content

Deconstructing Human-Element Breaches | Infosec HRM
Human risk management isn’t just rebranded SA&T — it’s a profound change of mindset, strategy, process and technology that approaches human-related breaches in a new way.

Inside an Infosec Boot Camp: All your questions, answered!
You need to get certified, but is an Infosec Boot Camp the right choice for you — or your team? Find out in this live Q&A with two Infosec instructors.

Emerging trend checklist: Which certifications cover which new skills?
Boost your team's cybersecurity skills with the right certifications. Discover the most in-demand skills and the certifications that cover them in our free guide.

Security Awareness Outcomes with Infosec IQ
See security awareness and training outcomes from more than five million Infosec IQ learners.
Our resources

From apathy to action: 5 proven ways to boost employee cybersecurity engagement
Discover 5 proven tactics to boost employee cybersecurity engagement, reducing phishing risks and building stronger human defense systems.

Funding security awareness training with grants: A practical guide for educators and governments
Discover how to fund your cybersecurity awareness initiatives through grants. Learn to work with your grant office and find opportunities for schools and government agencies.

The ultimate guide to security awareness training
Build a successful security awareness program with the help of this comprehensive guide. It's everything you need to get started.

How mature is your security awareness, behavior & culture program?
Evaluate your organization’s security awareness program with our free infographic on the five stages of program maturity.

5 emerging threats your security awareness training program should address
Learn how to update your security awareness training to address AI-generated deepfakes, sophisticated phishing, targeted ransomware and other emerging threats.

From hack to response to training: Unifying your security strategy with human risk management
An employee clicks on a phishing email, leading to a hack that compromises the organization’s systems. Witness the attack unfold from multiple perspectives — the attacker, the SOC and the employee. Then see firsthand how human risk management can pinpoint vulnerabilities like this and strengthen your defenses to reduce risk.

From CIA to CISO: AI security predictions and career strategies | Guest Ross Young
With over a decade of experience across intelligence agencies and major companies, Team8's Ross Young discusses the rapidly evolving AI security landscape, predicts how AI will transform security roles and offers valuable career advice for cybersecurity professionals at all levels.
Enhancing code security: Tools and techniques for safeguarding your code
An understanding of the difference between normal and abnormal developer behavior can help to make applications more secure.
Only 20% of new developers receive secure coding training, says report
A lack of secure coding training presents a risk for your organization.
CompTIA CySA+ Salary: What to expect in 2025
Discover the latest salary trends for CompTIA CySA+ certified professionals in 2024. Learn what factors influence your earning potential in the cybersecurity field.

Securing Apple vs Windows: Which is harder? | Guest Weldon Dodd
Weldon Dodd, Senior Vice President of Global Partnerships at Kandji. Dodd discusses a recent report highlighting why Apple devices are perceived as more secure than Windows systems in the event of a global software outage.

How MiDO trains the next generation of cyber talent with Infosec Institute
CompTIA CySA+ exam (CSO-003): Your guide
CompTIA has updated the exam for cybersecurity analyst certification. Read our in-depth guide to understand what has changed within the domains.
CySA+ resources: Books, practice exams and more
Ace your CySA+ certification with our authentic study material, guaranteed to meet CompTIA quality standards. Start preparing now!
CySA+ jobs outlook: Working as a cybersecurity analyst
What can a CySA+ certification do for your career? Learn what companies have CySA+ jobs, how much you can earn and more.
CySA+ exam objectives: The 4 domains that will be covered
Find out everything there is to know about CompTIA's CySA+ exam objectives, including detailed descriptions of the 4 domains that will be covered now.
10 biggest cybersecurity fines, penalties and settlements of 2021 (so far)
Learn about the largest fines given to companies when it comes to cybersecurity penalties and settlements in 2021.
Deepfake phishing example: Protect your employees from deepfake scams
A deepfake phishing attack scammed one company out of millions. Learn how to protect your organization from AI spoofing scams.

55 federal and state regulations that require employee security awareness and training
Introduction Humans are repeatedly described as the weakest link in the cybersecurity chain. We are highly susceptible to falling for phishing attacks, soci
Beyond awareness: Human risk management is the new cybersecurity frontier
Human risk management (HRM) is the future of human-centered cybersecurity. Learn what it is and how it can improve your security awareness program.
Celebrate Data Privacy Week: Free privacy and security awareness resources
Practice data privacy year-round with these free resources for Data Privacy Week! Learn about data privacy best practices, data privacy careers and more.
CrowdStrike Chaos: Why an update canceled flights and bricked ATMs
The recent CrowdStrike incident affected organizations worldwide. Learn why it happened and what you can do if you were impacted.
Home router security best practices: Protecting against cyberattacks
The FBI has issued a warning about attackers targeting home Wi-Fi routers. Learn what bad actors are after and how to keep your router secure.

Connecting a malicious thumb drive: An undetectable cyberattack
Did you know cybercriminals can pull off a nearly undetectable cyberattack using only a malicious thumb drive? Learn how.