Effective Security Awareness Training Really Does Reduce Data Breaches

The report asserts that social engineering drives 70–90% of breaches and presents a correlation study comparing the U.S. Privacy Rights Clearinghouse breach database with KnowBe4’s customer list, claiming that 97.6% of current U.S. customers have not had a public breach since 2005 and that customers previously breached are 65% less likely to experience breaches while subscribed to a security awareness training (SAT) program with frequent simulated phishing. It concludes that more frequent SAT and phishing simulations reduce human risk and real-world compromises, and points to a whitepaper for detailed methodology and data.