CISA Recommends Continuous Cybersecurity Training

The article advocates for continuous cybersecurity training to reduce human-factor risk from social engineering—citing data that 70–90% of breaches involve social engineering—and recommends an initial onboarding session, annual refreshers, and short monthly training reinforced by frequent simulated phishing. It notes CISA’s endorsement of “continuous cybersecurity training” in recent guidance related to Volt Typhoon and argues that regular, tailored instruction (including AI-driven personalization via AIDA) is more effective than infrequent training. The piece emphasizes making cybersecurity education an ongoing practice akin to real-world safety habits.